CtrlK
BlogDocsLog inGet started
Tessl Logo

ctf-crypto

Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.

60

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./ctf-crypto/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

42%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-categorized but oversized attack catalog: actionable in spots yet padded, with no sequenced workflow or validation. Its biggest defect is progressive disclosure — it leans heavily on .md reference files that are not present in the bundle.

Suggestions

Ship the referenced .md files (classic-ciphers.md, rsa-attacks.md, ecc-attacks.md, etc.) in a references/ directory, or remove the broken links and inline the essential worked examples.

Tighten the catalog: collapse the near-duplicate 'Modern Cipher Attacks' / 'Modern Cipher Attacks (Additional)' sections and trim write-up-name enumerations so each entry earns its tokens.

Add a short triage workflow with explicit validation checkpoints (e.g., verify factoring success before claiming plaintext, confirm oracle validity per query) for batch/destructive attack steps.

DimensionReasoningScore

Conciseness

Mostly one-liner entries, but the ~300-line body is padded with long write-up-name enumerations and near-duplicate attack listings that could be tightened; it is efficient in places yet verbose overall, not the lean 3.

2 / 3

Actionability

Gives some concrete executable commands (RsaCtfTool invocation, sage calls, pip installs) but most attack entries are descriptive one-liners pointing to detail files rather than copy-paste-ready code, falling short of fully executable guidance.

2 / 3

Workflow Clarity

Content is organized by attack category with a useful 'When to Pivot' triage section, but it is a reference catalog rather than a sequenced workflow and lacks explicit validation checkpoints for risky/batch operations.

2 / 3

Progressive Disclosure

The body signals one-level-deep references to numerous .md files (classic-ciphers.md, rsa-attacks.md, etc.), but no references/scripts/assets directories or linked .md files exist, so every reference is dangling and navigation is broken.

1 / 3

Total

7

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: it states concrete actions, supplies natural trigger terms, explicitly covers both what and when, and occupies a clear niche. It is concise despite listing many techniques.

DimensionReasoningScore

Specificity

Lists many concrete capabilities ('attacking encryption, hashing, signatures, ZKP, PRNG … Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation'), matching the multi-specific-action anchor rather than a vague domain name.

3 / 3

Completeness

Explicitly answers both what ('Provides cryptography attack techniques for CTF challenges') and when ('Use when attacking encryption, hashing …'), with a clearly stated 'Use when' trigger clause.

3 / 3

Trigger Term Quality

Includes natural crypto/CTF terms a user would actually say ('RSA, AES, ECC, lattices, LWE, CVP, padding oracle, GCM, stream/block cipher'), giving broad coverage of likely trigger keywords.

3 / 3

Distinctiveness Conflict Risk

Carves a distinct CTF-cryptanalysis niche with specific named algorithms, making it unlikely to trigger for adjacent reverse/forensics/web skills.

3 / 3

Total

12

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

relative_links

Relative link issues: 103 missing

Warning

Total

14

/

16

Passed

Repository
ljagiello/ctf-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.