ctf-misc

Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.

Quality

74%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./ctf-misc/SKILL.md

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a dense, highly actionable catalog of miscellaneous CTF techniques with good one-level-deep file references and clear pivot guidance. Its main weaknesses are redundancy across sections (which inflates length) and the absence of validation checkpoints for the one batch/destructive operation (nested archive extraction).

Suggestions

Deduplicate overlapping sections: QR codes, file-type detection, and Docker-group privesc each appear in multiple places — consolidate to one canonical location and link outward.

Add a validation/verification step to the nested archive extraction loop (e.g., verify the extracted file count/type before `rm "$f"`, or extract to a staging dir and only delete sources after success) so the batch/destructive operation has a checkpoint.

Trim the commented pseudocode in the 3D Printer Video section into an executable snippet, or move it entirely into a referenced file so the inline entry stays a true one-liner.

Dimension	Reasoning	Score
Conciseness	Entries are individually terse one-liners and snippets with no padding of concepts Claude already knows, but the ~497-line body has real redundancy (Docker-group privesc appears in both "Linux Privilege Escalation Quick Checks" and its own section; QR codes are covered in Quick Start, Common Encodings, QR Codes, and Technique Quick References), so it could be tightened noticeably.	3 / 5
Actionability	Overwhelmingly concrete, copy-paste-ready bash and Python snippets (zbarimg, z3 solver, hlextend, struct float reinterpretation, CTFd curl+jq), with only minor gaps such as the 3D printer tracking section being commented pseudocode steps rather than executable code.	4 / 5
Workflow Clarity	Sequences exist where relevant (Cipher Identification Workflow, CTFd detect-then-authenticate flow, nested archive loop), but the batch/destructive nested-archive script (`7z x -y "$f" && rm "$f"`) runs with no validation checkpoint, capping workflow clarity per the destructive/batch guidance.	3 / 5
Progressive Disclosure	A well-organized "Additional Resources" section lists 12 one-level-deep supporting files with one-line summaries, and the body repeatedly signals them with "See [X.md] for full details"; held below the top anchor because the body itself is long and several inlined quick-references overlap content that also lives in the referenced files. Note: the referenced bundle .md files are not present in the evaluated directory, so this is scored on the references as written.	4 / 5
	Total	14 / 20 Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a strong, third-person skill trigger that clearly states what it covers, when to use it, and when to prefer a more specific skill. It is comprehensive and distinctive; the only minor gap is that the action verb is a generic umbrella ("provides techniques") rather than a list of distinct concrete actions.

Dimension	Reasoning	Score
Specificity	Enumerates many concrete subtypes ("encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles") giving comprehensive coverage, but the single umbrella verb "Provides ... techniques" is less action-specific than a list of distinct verbs, so it sits just below the top anchor.	4 / 5
Completeness	Explicitly answers both what ("Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories") and when ("Use for ...", "Prefer a more specific skill first when ...", "Treat this as the fallback skill ...") with concrete trigger phrases and explicit negative guidance.	5 / 5
Trigger Term Quality	Strong coverage of natural CTF terms a user would actually say (pyjails, bash jails, RF/SDR, DNS oddities, QR/audio puzzles, constraint solving, game theory), plus negative triggers (web, pwn, reverse, forensics, malware, OSINT, crypto); a few natural synonyms/variants are absent, keeping it just below the comprehensive anchor.	4 / 5
Distinctiveness Conflict Risk	Defines a clear fallback niche and actively steers away from overlapping skills ("Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto"; "not the default starting point"), giving minimal conflict risk.	5 / 5
	Total	18 / 20 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
metadata_version	'metadata.version' is missing	Warning
relative_links	Relative link issues: 57 missing	Warning

	Total	14 / 16 Passed

Repository: ljagiello/ctf-skills
Path: ctf-misc/SKILL.md
Commit: 36c72e5

Reviewed: 4 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.