CTF Skills
Web exploitation, pwn, crypto, and reversing — as playbooks.
Use it for
Learning exploitation mechanics in a legal lab
Skip it if
Assessing production security; different discipline, different tools
What it is
Encodes how experienced CTF players approach each category: what to look at first, which tools to reach for, and the dead ends that waste an evening. Useful for practice and authorised engagements; useless as a security audit of your own product.
Install
Clone the repository, then copy the skill folder into your agent's skills directory — ~/.claude/skills/ for Claude Code. Skills are plain files: no build step, no daemon.
git clone https://github.com/ljagiello/ctf-skills.git
How to judge it
Read the SKILL.md before you install. A good skill states when it applies, what it must not do, and how to verify the result. A skill that only lists adjectives will change the agent's tone without improving its output — skip those.
Other Coding & Dev skills
- Agent Skills by Addy Osmani — Engineering skills aimed at production code: review, testing, refactoring, and release hygiene.
- Archify — Turns a plan, a spec, or a codebase into an interactive architecture diagram.
- Ponytail — Makes the agent argue for less code before it writes more.