CtrlK
BlogDocsLog inGet started
Tessl Logo

competition-crypto-mobile

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for crypto, encoding, steganography, APK, IPA, and mobile trust-boundary challenges. Use when the user asks to decode a blob, recover a transform chain or key, inspect hidden media payloads, hook an APK or IPA signer, inspect app storage, or replay mobile request-signing logic. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

70

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Well-structured, lean, and clearly navigated content with strong progressive disclosure and a sensible workflow. The main weakness is actionability: the guidance names what to inspect but not how, with no executable commands or tooling.

Suggestions

Add one or two concrete, executable examples per path (e.g., a frida hook snippet for signer interception, or a specific command/flag for LSB inspection) to lift actionability.

Insert an explicit validation checkpoint between 'record exact parameters' and 'reproduce' (e.g., verify the recovered intermediate matches the expected encoding) to strengthen workflow_clarity.

Name the specific tools the skill expects to use (frida, apktool, radare2, zsteg, etc.) so the guidance maps from 'inspect X' to 'inspect X with Y'.

DimensionReasoningScore

Conciseness

Lean bullet-driven body that assumes Claude's competence, never explaining what crypto/stego/mobile are; every section earns its tokens with only trivial frontmatter repetition.

5 / 5

Actionability

Provides concrete checklists of artifacts to inspect (manifest/plist, exported components, deeplinks, native libs) but no executable code, commands, or named tools, leaving the specific execution steps implicit.

3 / 5

Workflow Clarity

A clear five-step Quick Start sequence with a built-in verification checkpoint (reproduce the plaintext/payload/signed request), though intermediate validation gaps remain.

4 / 5

Progressive Disclosure

Concise overview body pointing to a single real one-level-deep reference (references/crypto-mobile.md, verified present) plus three clearly signaled sibling skills, with easy navigation.

5 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly establishes a niche, answers what and when with concrete triggers, and bounds its scope via the orchestrator dependency. Slightly technical trigger phrasing keeps trigger term quality just below the top anchor.

DimensionReasoningScore

Specificity

Lists multiple concrete actions across crypto/stego/mobile (decode a blob, recover a transform chain or key, hook an APK or IPA signer, replay mobile request-signing logic) with comprehensive domain coverage.

5 / 5

Completeness

Explicitly answers both what (CTF-sandbox workflow for crypto, encoding, steganography, APK, IPA, mobile trust-boundary) and when (Use when the user asks to decode a blob...) with concrete trigger phrases.

5 / 5

Trigger Term Quality

Good keyword coverage with file extensions (APK, IPA) and natural phrases like 'decode a blob' and 'inspect hidden media payloads', though several terms ('transform chain', 'request-signing logic') lean technical rather than colloquial.

4 / 5

Distinctiveness Conflict Risk

Explicitly scoped as a downstream skill usable only after $ctf-sandbox-orchestrator routes here, with a clear niche and delegation to sibling skills, minimizing conflict risk.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.