CtrlK
BlogDocsLog inGet started
Tessl Logo

ctf-misc

Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.

64

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

Fix and improve this skill with Tessl

tessl review fix ./ctf-misc/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A thorough, action-oriented CTF-misc reference with strong executable examples and good navigational structure. Its main weaknesses are repeated technique descriptions across sections and reference files that cannot be verified in the bundle.

Suggestions

Deduplicate techniques that appear in both 'Additional Resources', 'Technique Quick References', and full sections — keep one canonical location and link from the others.

Ensure referenced files (pyjails.md, bashjails.md, encodings.md, etc.) are shipped in the bundle, or move the inlined deep-dive content into them so SKILL.md stays a true overview.

Add brief validation/verification steps for the riskier workflows (e.g., confirm a decoded flag format before submitting, verify archive integrity after nested extraction).

DimensionReasoningScore

Conciseness

It assumes Claude's competence (no primers on base64/encodings), but techniques like SUID, Docker group, sudo wildcard, monit, PostgreSQL RCE, and PaperCut appear 2-3 times across 'Additional Resources', 'Technique Quick References', and full sections, so it could be tightened.

3 / 5

Actionability

Dense executable guidance throughout (pip install, zbarimg, Z3 snippets, struct.pack, pwntools), though some entries are pointer-only ('See X.md') without inline code.

4 / 5

Workflow Clarity

The 'Cipher Identification Workflow' and 'When to Pivot' give sequenced guidance, but most techniques are independent reference entries with no validation checkpoints for fragile operations.

3 / 5

Progressive Disclosure

Clear overview with a well-signaled one-level-deep 'Additional Resources' index, but the referenced .md files are not present in the provided bundle and some detail is inlined that belongs in those files.

4 / 5

Total

14

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A well-crafted description that states what the skill does, when to use it with concrete triggers, and where it sits relative to more specific skills. Minor risk of trigger breadth, but the fallback framing keeps conflict low.

DimensionReasoningScore

Specificity

Lists many specific concrete techniques (encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esolangs, QR/audio puzzles, constraint solving, game theory, sandbox escapes, hybrid logic puzzles) with comprehensive coverage of the misc-CTF domain.

5 / 5

Completeness

Explicitly answers both what ('Provides miscellaneous CTF challenge techniques...') and when ('Use for encoding puzzles...') with concrete trigger phrases and fallback guidance.

5 / 5

Trigger Term Quality

Includes natural terms users actually say (pyjails, bash jails, QR, RF/SDR, unicode tricks, esoteric languages, constraint solving) with synonym coverage, so discovery is reliable.

5 / 5

Distinctiveness Conflict Risk

Explicitly carves a niche as the cross-category fallback and directs away from web/pwn/reverse/forensics/malware/OSINT/crypto, minimizing overlap with sibling CTF skills.

5 / 5

Total

20

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

relative_links

Relative link issues: 57 missing

Warning

Total

14

/

16

Passed

Repository
ljagiello/ctf-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.