Communitygithub.com

ctf-sandbox

CTF/AWD/靶场多题型编排的瘦主入口。将控制权交给旁路 CTF-Sandbox-Orchestrator。当用户提及 CTF、AWD、靶场或比赛题且没有更具体的 pwn/APK/IDA 路线获胜时使用。

ctf-sandbox란 무엇인가요?

这是一个针对 CTF(Capture The Flag) 竞赛、AWD(Attack with Defense) 攻防赛以及安全靶场场景的 AI 助手技能入口。它采用“瘦主入口 + 旁路编排器”的架构设计：本技能仅作为关键词触发入口（PRIMARY），当检测到用户提及 CTF、AWD、靶场或比赛题时激活，但不会自行处理具体竞赛试题。它要求立即执行初始化脚本 `case-init.ps1`，并在获得 `auth.status=granted` 前禁止访问真实外网。激活后必须打开旁路编排器 `CTF-Sandbox-Orchestrator`，由编排器根据题型（如 pwn/ROP、APK、IDA）选择具体的 `competition-*` 下游技能。这种设计避免了将 40 多个竞赛子技能写入核心路由表，确保了核心路由包（MIT + scope.md 门禁）与 GPL 协议的开源旁路包的授权分离，同时保持多题型编排的灵活性。

지원 대상✓Claude Code~Codex CLI~Cursor
npx skills add https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/ctf-sandbox
원본 보기→모든 스킬 둘러보기

즐겨 사용하는 AI에게 물어보기

이 에이전트 스킬이 미리 로드된 새 채팅을 엽니다.

OpenAIChatGPTClaudeClaudeGeminiGeminiGrokGrokPerplexityPerplexityDeepSeekDeepSeek

문서

CTF 沙箱入口（旁路，非第二路由器）

수신 후 즉시 실행

  1. 지금: ../scripts/case-init.ps1 실행; auth.status=granted 전까지 실제 외부 네트워크에 접근 금지. 경진대회/실습장은 -NetworkProfile lab 또는 offline 사용.
  2. 지금: 패키지 루트 아래 ../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md 열고, 해당 샌드박스 가정에 따라 계속 진행.
  3. 반드시 40개 이상의 competition-* 하위 스킬을 routing.json에 작성하지 말 것. 이 진입점은 단일 PRIMARY 걸쇠일 뿐입니다.
  4. 작업: orchestrator가 적절한 downstream competition-*을 선택. 특정 문제 유형이 명확할 경우(pwn/ROP, APK, IDA) 이미 routing.json의 상위 규칙이 승리했으므로 다시 차지하지 말 것.

별도 계층의 이유

CTF-Sandbox-Orchestrator/는 GPL 바이패스 패키지이며, 라이선스 기본값은 샌드박스 내부입니다. 핵심 라우팅 패키지는 여전히 MIT + scope.md 게이트입니다. 본 스킬은 키워드 진입점 역할만 하며, 경진대회 트리를 핵심에 통합하지 않습니다.

작업 완료 자가 점검(완료 주장 전 반드시 통과)

  • 먼저 case-init / scope를 수행했는가? (사용자가 "CTF"라고 말한 것을 외부 네트워크 승인으로 간주하지 않았는가?)
  • sidecar orchestrator를 열었는가? (40개 하위 스킬을 PRIMARY로 취급하지 않았는가?)
  • 작업이 실제로 pwn/APK/IDA인 경우, 더 구체적인 PRIMARY가 이를 인계받도록 했는가?

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD testing.

apk-reverse

在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。

attack-chain

Use for authorized multi-stage attack-path planning and orchestration when a task spans reconnaissance, initial access, privilege escalation, lateral movement, or impact assessment. Route single-stage tasks directly to their specialist skill.

binary-diff

|

binary-ninja-reverse

Use for authorized binary analysis in Binary Ninja, including HLIL/MLIL/LLIL inspection, strings/imports/exports, cross-references, types, patch review, Python API automation, and optional Binary Ninja MCP or localhost HTTP integration.

browser-automation

|

browser-extension-reverse

Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.

case-review

Reviews a reverse-skill case package for scope readiness, Evidence to Finding to Path traceability, work item coverage, timeline references, and optional artifact hash integrity before report handoff.

cloud-k8s

Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.

code-audit

Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.

database-security

Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.

diagram-generator

generate, refine, validate, and render diagrams from natural language, notes, code snippets, schemas, tables, or existing diagram source. use for flowcharts, swimlanes, sequence diagrams, state diagrams, er diagrams, class diagrams, architecture/c4-style diagrams, dependency graphs, gantt charts, mind maps, user journeys, sankey-style flows, org charts, network graphs, and other visual models. supports mermaid by default, graphviz dot for complex graph layout, plantuml for uml-heavy engineering diagrams, and svg output when direct markup is more reliable.

digital-forensics

Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.

docs-generator

|

dotnet-reverse

.NET / C# 二进制逆向。当目标是 .NET assembly（PE 头含 CLR、.exe/.dll 托管程序）、C# 编译产物（含 NativeAOT）、红队 Sharp* 工具（Rubeus / SharpHound / SharpHound 等）、.NET 混淆程序（ConfuserEx / SmartAssembly / Babel / Eazfuscator）、.NET loader / info-stealer / 套壳 malware 时使用。优先用 dnSpyEx + de4dot，需要 AI 直接操作时联动 dnSpy MCP。不用于纯 native 二进制（走 reverse-engineering / ida-reverse）。

edr-bypass-re

|

email-security

Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.

firmware-pentest

|

ghidra-reverse

Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.

go-rust-reverse

Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.

관련 스킬

steipete/video-frames

Extract frames or short clips from videos using ffmpeg.

community

steipete/summarize

Summarize or transcribe URLs, YouTube/videos, podcasts, articles, transcripts, PDFs, and local files.

community

openclaw/openclaw

Use when testing, fixing, or extending the OpenClaw Control UI GUI with Vitest + Playwright end-to-end checks, mocked Gateway WebSocket flows, mocked dashboard runs, screenshots/videos, or agent-verifiable browser proof.

community

obra/superpowers

Obra superpowers agent skills.

community

affaan-m/ECC

See, Understand, Act on video and audio. See- ingest from local files, URLs, RTSP/live feeds, or live record desktop; return realtime context and playable stream links. Understand- extract frames, build visual/semantic/temporal indexes, and search moments with timestamps and auto-clips. Act- transcode and normalize (codec, fps, resolution, aspect ratio), perform timeline edits (subtitles, text/image overlays, branding, audio overlays, dubbing, translation), generate media assets (image, audio...

community

affaan-m/everything-claude-code

End-to-end marketing campaign planning and execution. Covers audience research, positioning, campaign angle definition, landing page copy, email sequences, social posts, ad copy, short-form video scripts, and content calendars. Use as the orchestration layer for multi-channel product launches. Use when planning or executing a multi-channel product launch, or producing landing page, email, social, or ad copy.

community