ctf-sandbox
Skill5 starsChanged 14 days agoMITView on GitHub
Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.
3 other projects use a version of this, 3 of them edited.
Adopted by
Most recently taken up by
- TaiMaBenJi/taima-skillsedited, first seen Oct 11, 2026
- zhaoxuya520/reverse-skill-privateedited, first seen Oct 8, 2026
- zhaoxuya520/reverse-skilledited, first seen Sep 22, 2026
Other versions3 projects use a version of this.
Word for word · 0
None found.
Edited · 3
- zhaoxuya520/reverse-skill-private★ 40k100% same
- zhaoxuya520/reverse-skill★ 38k100% same
- TaiMaBenJi/taima-skills★ 1100% same
Wrote their own version · 0
None found.
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository119 other files it gives its agents.
- AGENTS.mdAGENTS.md
- templates/AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- accessibilitySkill
- frontend-designSkill
- python-background-jobsSkill
- python-executorSkill
- python-testing-patternsSkill
- seoSkill
- ai-slop-cleanerSkill
- analyzeSkill
- api-and-interface-designSkill
- ask-claudeSkill
- ask-geminiSkill
- autopilotSkill
- browser-testing-with-devtoolsSkill
- build-fixSkill
- cancelSkill
- ci-cd-and-automationSkill
- clawd-change-workflowSkill
- code-review-and-qualitySkill
- code-reviewSkill
- code-simplificationSkill
- configure-notificationsSkill
- context-engineeringSkill
- debugging-and-error-recoverySkill
- deep-interviewSkill
- deepsearchSkill
- deprecation-and-migrationSkill
- doctorSkill
- documentation-and-adrsSkill
- ecomodeSkill
- frontend-ui-engineeringSkill
- frontend-ui-uxSkill
- git-masterSkill
- git-workflow-and-versioningSkill
- helpSkill
- hudSkill
- idea-refineSkill
- incremental-implementationSkill
- intent_routerSkill
- keyword_registrySkill
- mode_stateSkill
- noteSkill
- omx-setupSkill
- performance-optimizationSkill
- pipeline_orchestratorSkill
- pipelineSkill
- planning-and-task-breakdownSkill
- planSkill
- ralph-initSkill
- ralph_loopSkill
- ralphSkill
- ralplanSkill
- android-reverse-engineeringSkill
- api-securitySkill
- apk-reverseSkill
- attack-chainSkill
- binary-diffSkill
- browser-automationSkill
- The first 60 shown.
The file
Files
CTF sandbox entry (sidecar, not a second router)
ACTION REQUIRED（读完后立刻执行）
NOW: 跑../scripts/case-init.ps1；auth.status=granted前禁止对真实外网 ACT。竞赛/靶场用-NetworkProfile lab或offline。NOW: 打开包根下的../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md，按它的 sandbox 假设继续。MUST NOT把 40+ 个competition-*子技能写进routing.json。本入口只是一条 PRIMARY 门闩。ACT: 由 orchestrator 选一个 downstreamcompetition-*。具体题型已明确时（pwn/ROP、APK、IDA）应已由routing.json更靠前的规则赢下，不要再抢。
为什么单独一层
CTF-Sandbox-Orchestrator/ 是 GPL 旁路包，授权默认是沙箱内部。核心路由包仍是 MIT + scope.md 门禁。本 skill 只做关键词入口，不把竞赛树并进核心。
任务完成自检（声称完成前 MUST 通过）
- 我是否先走了 case-init / scope，而不是把“用户说了 CTF”当成已授权外网？
- 我是否打开了 sidecar orchestrator，而不是把 40 个子技能当 PRIMARY？
- 若任务其实是 pwn/APK/IDA，我是否让更具体的 PRIMARY 接手？
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.