CtrlK
BlogDocsLog inGet started
Tessl Logo

competition-zip-archive

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for ZIP and PKZIP archive challenges, legacy ZipCrypto identification, known-plaintext recovery with bkcrack, key-based decryption, and reproducible extraction. Use when the user asks to solve an encrypted ZIP challenge, inspect ZipCrypto metadata, recover keys from a known file prefix, or unlock an archive without starting with password brute force. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

72

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable skill body with concrete commands and a clear workflow including validation. The main gap is the absence of an explicit error-recovery feedback loop after validation.

Suggestions

Add an explicit 'if 7z t or hash validation fails, recheck the known-plaintext fixture/offsets and re-run key recovery' feedback loop under step 3 to reach top workflow_clarity.

Tighten the explanatory sentences in step 1 (e.g. the local ZIP header note) into a one-line caveat to improve conciseness.

Consider splitting the offset/sparse-hint detail in step 2 into references/zip-archive.md to deepen progressive disclosure.

DimensionReasoningScore

Conciseness

Lean and task-focused with no padding about basics Claude already knows; minor explanatory sentences (e.g. the local-header caveat) could be tightened but mostly earn their place.

4 / 5

Actionability

Provides copy-paste-ready commands (bkcrack, 7z, sha256sum, file) covering the common cases from archive triage through key recovery, unlock, and extraction.

5 / 5

Workflow Clarity

Clear four-step sequence with validation checkpoints (7z t, hash/flag comparison) and a re-route branch, but lacks an explicit validate→fix→retry feedback loop for failed validation.

4 / 5

Progressive Disclosure

Well-organized sections with a single clearly signaled one-level-deep reference (references/zip-archive.md, confirmed present) for the decision table and checklist; the bulk of detail stays inline.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that names concrete capabilities and gives explicit use-when triggers within a well-scoped niche. It could only marginally improve by adding common file-extension synonyms.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'legacy ZipCrypto identification, known-plaintext recovery with bkcrack, key-based decryption, and reproducible extraction' — giving comprehensive coverage of what the skill does.

5 / 5

Completeness

Explicitly answers both what (the ZipCrypto known-plaintext workflow) and when ('Use when the user asks to solve an encrypted ZIP challenge...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Includes natural phrases users would say ('encrypted ZIP challenge', 'recover keys from a known file prefix', 'unlock an archive'), but lacks file-extension synonyms like '.zip' for full coverage.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (encrypted ZIP/PKZIP with legacy ZipCrypto) and is explicitly scoped as a downstream of `$ctf-sandbox-orchestrator`, minimizing conflict risk.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.