CTF Skills 🧩 Skill Open source

What it does

CTF Skills is a set of Agent Skills for solving capture-the-flag challenges. It groups techniques by category and loads the relevant one automatically from what you describe, so an agent can work through web exploitation, binary pwn, cryptography, reverse engineering, forensics, OSINT, malware analysis and miscellaneous puzzle categories. Each category skill carries concrete techniques, runnable template scripts and payload generators drawn from real challenge patterns. An orchestrator skill analyzes a challenge and delegates to the right category, and a writeup skill produces a standardized solution report afterward.

What is inside

• Category skills: ctf-web, ctf-pwn, ctf-crypto, ctf-reverse, ctf-forensics, ctf-osint, ctf-malware, ctf-misc and ctf-ai-ml
• Runnable templates: pwntools scripts for common exploit patterns, fuzzing helpers, and payload generators
• An installer that sets up the tool groups (Python, apt, brew, gems, Go and manual tools) with dry-run and verify modes
• An orchestrator (solve-challenge) that routes a challenge to the right category
• A writeup generator that outputs metadata, solution steps, code and lessons learned

Works with

Any tool that supports the Agent Skills specification, including Claude Code, Codex, Gemini CLI and OpenCode.

How to install

npx skills add ljagiello/ctf-skills

Optionally pre-install the tools with bash scripts/install_ctf_tools.sh all.

Maintenance and safety

The skills are MIT-licensed and actively maintained. They are meant for CTF competitions and practice targets, which the README names, rather than live systems you do not control. The installer pulls a large set of security tools and shallow-clones an external payload repository, so review it before running, and prefer the dry-run first. The techniques are educational and legitimate in a CTF context.

Who should use it

It suits CTF players and people learning security who want an agent that can recognize a challenge type and reach for the right technique quickly. Outside a CTF or authorized lab it has little use.