CTF Skills

Web exploitation, pwn, crypto, and reversing — as playbooks.

Collection Coding & Dev

Use it for

Learning exploitation mechanics in a legal lab

Skip it if

Assessing production security; different discipline, different tools

What it is

Encodes how experienced CTF players approach each category: what to look at first, which tools to reach for, and the dead ends that waste an evening. Useful for practice and authorised engagements; useless as a security audit of your own product.

Install

Clone the repository, then copy the skill folder into your agent's skills directory — ~/.claude/skills/ for Claude Code. Skills are plain files: no build step, no daemon.

Terminal
git clone https://github.com/ljagiello/ctf-skills.git

How to judge it

Read the SKILL.md before you install. A good skill states when it applies, what it must not do, and how to verify the result. A skill that only lists adjectives will change the agent's tone without improving its output — skip those.

Other Coding & Dev skills

  • Agent Skills by Addy Osmani — Engineering skills aimed at production code: review, testing, refactoring, and release hygiene.
  • Archify — Turns a plan, a spec, or a codebase into an interactive architecture diagram.
  • Ponytail — Makes the agent argue for less code before it writes more.