Skill 与 AgentSKILLS & AGENTS· CLAUDE-SKILL
ljagiello/ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
根据公开文档整理，未运行实测；费用以项目官网为准。Based on public documentation, without runtime testing. Check the project site for pricing.
能力CAPABILITIES
上手GET STARTED
npx skills add ljagiello/ctf-skills选择与你的环境对应的方式。命令来自项目文档，未运行实测。Choose the option for your environment. Commands come from project documentation and have not been run-tested.
使用限制LIMITATIONS
以下要求与风险来自文档静态检查，未执行项目代码；扫描没有命中，不代表使用安全。Risk here is evidence, not an alarm. These findings come from static scanning of the docs; we never execute a project’s code.
限制LIMITS
存在风险Risk found
静态扫描STATIC SCAN
01下载未知二进制Downloads an unknown binaryctf-reverse/SKILL.md
chmod +x binary # Make executable
02执行 Shell 命令Runs shell commandsctf-ai-ml/SKILL.md
allowed-tools: Bash
03读写本地文件Reads and writes local filesctf-ai-ml/SKILL.md
allowed-tools: Write
04读写本地文件Reads and writes local filesctf-ai-ml/SKILL.md
allowed-tools: Edit
05执行 Shell 命令Runs shell commandsctf-crypto/SKILL.md
allowed-tools: Bash
06需要系统权限Needs system permissionsctf-forensics/SKILL.md
sudo mount -o loop,ro image.dd /mnt/evidence
07需要系统权限Needs system permissionsctf-misc/SKILL.md
- [linux-privesc.md](linux-privesc.md) - Sudo wildcard parameter injection (fnmatch), crafted pcap for sudoers.d, monit confcheck process in
08控制浏览器Controls a browserctf-misc/SKILL.md
- [games-and-vms-4.md](games-and-vms-4.md) - Part 4 (2018-era): XSLT as Turing-complete VM, JavaScript MAX_SAFE_INTEGER successor equality,
09读取 API KeyReads an API keyctf-misc/SKILL.md
`COPY (SELECT '') TO PROGRAM 'cmd'` executes OS commands as postgres. `pg_read_file('/path')` reads files. Extract credentials from `pg_base10控制浏览器Controls a browserctf-osint/SKILL.md
**MCP servers (optional):** Playwright MCP ([microsoft/playwright-mcp](https://github.com/microsoft/playwright-mcp)) for browser-driven OSIN
项目动态PROJECT ACTIVITY
首次发现FIRST SEEN
26 OCT 202626 OCT 2026
状态STATUS
持续活跃Active
{
"agents": [
{
"agent": "claude-code",
"evidence": "readme: …Agent Skills spec, including [Claude Code](https://docs.anthropic.com/e…"
}
],
"apiKey": "en use `Authorization: Token $CTF_TOKEN` header for all requests. ```bash expo",
"docker": null,
"taxonomy": {
"scores": {
"design": 0,
"ai-tools": 2,
"dev-tools": 2,
"indie-web": 0,
"skill-agent": 10,
"productivity": 1
},
"primary": "skill-agent",
"secondary": "claude-skill"
},
"localRuntime": null,
"skillMdTotal": 12,
"skillMdErrors": [],
"treeTruncated": false,
"categoryScores": {
"data": 0,
"agent": 0,
"media": 0,
"design": 0,
"browser": 0,
"devtool": 2,
"security": 4,
"marketing": 0,
"productivity": 0
},
"classification": [
{
"signal": "12 SKILL.md with name + description",
"weight": 0.95
},
{
"signal": "README describes a Claude / Agent Skill",
"weight": 0.7
},
{
"signal": "name contains 'skill'",
"weight": 0.4
},
{
"signal": "description mentions AI",
"weight": 0.2
}
],
"scannedSources": [
"readme",
"ctf-ai-ml/SKILL.md",
"ctf-crypto/SKILL.md",
"ctf-forensics/SKILL.md",
"ctf-malware/SKILL.md",
"ctf-misc/SKILL.md",
"ctf-osint/SKILL.md",
"ctf-pwn/SKILL.md",
"ctf-reverse/SKILL.md",
"ctf-similar-search/SKILL.md",
"ctf-web/SKILL.md",
"ctf-writeup/SKILL.md",
"solve-challenge/SKILL.md"
],
"skillMdFetched": 12
}