ctf-crypto

Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-organized, token-efficient crypto attack catalog with executable quick-start commands and clear category structure. Its main weakness is that the overview leans heavily on detail files that are referenced but not included in the bundle, leaving progressive disclosure incomplete.

Suggestions

Ship the referenced detail files (classic-ciphers.md, modern-ciphers*.md, rsa-attacks*.md, ecc-attacks.md, lattice-and-lwe.md, prng*.md, exotic-crypto*.md, etc.) alongside SKILL.md so the 'See [file.md]' links resolve.

Add a brief end-to-end triage workflow with explicit checkpoints (identify cipher family -> confirm with quick-start command -> apply attack -> verify recovered plaintext is valid) to raise workflow clarity.

Tighten the longest catalog entries (e.g., modern-ciphers-4) by moving dense math notation into the detail files and keeping one-line summaries inline.

Dimension	Reasoning	Score
Conciseness	A dense one-liner-per-technique cheat sheet that assumes Claude's crypto knowledge with no padding; a few catalog entries run long with heavy parenthetical math notation (e.g., the modern-ciphers-4 line) that could be trimmed.	4 / 5
Actionability	The Quick Start Commands section is copy-paste-ready (factorint, openssl, RsaCtfTool invocations) and tools are named (hashpumpy, PadBuster, nonce-disrespect), but most technique entries are descriptive one-liners pointing to detail files rather than inline executable code.	4 / 5
Workflow Clarity	Sections are organized by attack category with a light triage flow (Quick Start identify cipher -> pick section -> When to Pivot); no explicit validate-fix-retry checkpoints, but crypto attacks are read-only so the destructive/batch validation cap does not apply.	4 / 5
Progressive Disclosure	The body is structured as a well-signaled overview with extensive one-level-deep 'See [file.md]' references and an 'Additional Resources' index, but the referenced bundle files (classic-ciphers.md, modern-ciphers.md, rsa-attacks.md, etc.) are not present in the bundle, breaking the disclosure chain.	3 / 5
	Total	15 / 20 Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that clearly states what the skill does and when to use it with a rich set of natural CTF crypto trigger terms. The only weakness is reliance on a single generic action verb rather than enumerating distinct concrete actions.

Suggestions

Replace the single generic verb 'Provides cryptography attack techniques' with two or three distinct concrete actions (e.g., 'Identifies, triages, and exploits cryptographic weaknesses in CTF challenges').

Dimension	Reasoning	Score
Specificity	Names the domain plus many concrete attack technique families (RSA, AES, ECC, lattices, LWE, CVP, Coppersmith, Pollard, Wiener, padding oracle, GCM), but the action verb is a single generic 'Provides cryptography attack techniques' rather than multiple distinct concrete actions.	4 / 5
Completeness	Explicitly answers both what ('Provides cryptography attack techniques for CTF challenges') and when ('Use when attacking encryption, hashing, signatures, ZKP, PRNG...') with concrete trigger phrases.	5 / 5
Trigger Term Quality	Comprehensive coverage of natural CTF crypto terms a user would say, including encryption, hashing, signatures, ZKP, PRNG, and specific algorithms/attacks; the domain is technique-driven so the absence of file extensions is not a gap.	5 / 5
Distinctiveness Conflict Risk	Clear niche (CTF cryptanalysis) with distinct trigger terms and an in-body 'When to Pivot' section routing to sibling skills, giving minimal conflict risk.	5 / 5
	Total	19 / 20 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
metadata_version	'metadata.version' is missing	Warning
relative_links	Relative link issues: 110 missing	Warning

	Total	14 / 16 Passed

Repository: ljagiello/ctf-skills
Path: ctf-crypto/SKILL.md
Commit: c332c7b

Reviewed: 4 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.