ctf-sandbox
Helps your agent manage security challenges like CTFs and competitions. It's useful for orchestrating different types of analysis and problem-solving tasks.
What it does
This tool helps organize and run cybersecurity challenges, like those found in competitions (CTF) or training environments (sandbox). It starts the process and hands off control to a more specialized orchestrator.
When to use it
- ✓When participating in security competitions (CTF/AWD).
- ✓When using virtual training environments (sandbox/靶场).
- ✓When you need an isolated environment to test security challenges.
Example of what to ask your AI
“I need to set up an environment for a CTF competition.”
Want more? Open the sections below.
How to use
The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.
Skill link
Ready-to-paste message
How it works
When you mention terms like CTF, AWD, or 靶场, this tool is activated. It runs initial scripts to prepare the environment and then calls another tool (the orchestrator) which will choose the specific task to run within the competition environment.
Installation
Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.
In the terminal (Claude Code, Codex, Cursor), in your project folder:
npx skills add zhaoxuya520/reverse-skill --skill ctf-sandboxOr download just the file:
curl -L https://raw.githubusercontent.com/zhaoxuya520/reverse-skill/main/skills/ctf-sandbox/SKILL.md -o SKILL.mdTechnical content (original SKILL.md)
Original text by the author, straight from GitHub.
CTF sandbox entry (sidecar, not a second router)
ACTION REQUIRED（读完后立刻执行）
NOW: 跑../scripts/case-init.ps1；auth.status=granted前禁止对真实外网 ACT。竞赛/靶场用-NetworkProfile lab或offline。NOW: 打开包根下的../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md，按它的 sandbox 假设继续。MUST NOT把 40+ 个competition-*子技能写进routing.json。本入口只是一条 PRIMARY 门闩。ACT: 由 orchestrator 选一个 downstreamcompetition-*。具体题型已明确时（pwn/ROP、APK、IDA）应已由routing.json更靠前的规则赢下，不要再抢。
为什么单独一层
CTF-Sandbox-Orchestrator/ 是 GPL 旁路包，授权默认是沙箱内部。核心路由包仍是 MIT + scope.md 门禁。本 skill 只做关键词入口，不把竞赛树并进核心。
任务完成自检（声称完成前 MUST 通过）
- 我是否先走了 case-init / scope，而不是把“用户说了 CTF”当成已授权外网？
- 我是否打开了 sidecar orchestrator，而不是把 40 个子技能当 PRIMARY？
- 若任务其实是 pwn/APK/IDA，我是否让更具体的 PRIMARY 接手？
FAQ
What are CTF, AWD, and 靶场?
These are types of cybersecurity competitions or environments. CTF (Capture The Flag) and AWD (Attack-Defense) are competition formats, and 靶场 (bǎchǎng) is a Chinese term for 'training ground' or 'sandbox'.
Why doesn't this tool do everything itself?
This tool is just the entry point. It ensures the correct environment is prepared and then passes the task to a more specialized tool (the orchestrator) that knows how to handle different types of security challenges.
Can I use this to test exploits on real networks?
No. This tool is designed for controlled and isolated environments (sandbox) or competitions. It ensures that actions on external networks only happen after proper authorization and security setup.
Details
Original description by the author
Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.
Popularity
- GitHub stars
- 42k
- Ranking position
- #4757
- License
- MIT
- Updated
- 9/22/2026
Comments
- …
More skills from this repository
competition-ad-certificate-abuse
Helps your agent analyze attacks on digital certificate systems. It investigates how certificates can be misused to gain access.
zhaoxuya520/reverse-skill
competition-agent-cloud
Helps your agent analyze security challenges in AI and cloud systems. It investigates how prompts, tools, and the cloud can be exploited.
zhaoxuya520/reverse-skill
competition-android-hooking
Helps your agent investigate Android applications. It analyzes how apps work internally and how they might be modified or exploited.
zhaoxuya520/reverse-skill
competition-browser-persistence
Helps your agent analyze how websites store information in your browser. It investigates cookies and other data to understand how sessions work.
zhaoxuya520/reverse-skill
Similar skills
benchmark-optimization-loop
Has your agent improve something's speed in a measured way. It tests multiple versions and chooses the fastest one that still works correctly.
affaan-m/ECC
change-impact
Helps your agent analyze the impact of code changes before making them. It compares the planned vs. actual results afterward, covering paths, data, tests, and documentation. Useful for risky or system-wide changes.
affaan-m/ECC
click-path-audit
Lets your agent trace all user buttons and interactions to find bugs. It finds issues where functions seem to work alone but fail together. Useful when bugs persist even after debugging.
affaan-m/ECC