CtrlK
BlogDocsLog inGet started
Tessl Logo

ctf-sandbox

Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.

68

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A compact, well-structured gating skill with concrete commands, an explicit auth validation checkpoint, and a completion checklist. Its main limitation is that most execution detail is delegated to the sidecar orchestrator.

Suggestions

Add a one-line note on what to do if case-init/scope returns auth.status != granted, so the failure path is explicit rather than only '禁止 ACT'.

Confirm the external referenced paths (../scripts/case-init.ps1, ../../CTF-Sandbox-Orchestrator/.../SKILL.md) resolve from this skill's location, or convert to bundle-local references for portability.

Surface a minimal fallback (e.g. an offline profile example command) so the orchestration handoff remains actionable even when the sidecar package is absent.

DimensionReasoningScore

Conciseness

Lean and efficient: terse NOW/MUST NOT/ACT items plus a brief rationale ('GPL 旁路包...') that conveys non-obvious architecture rather than padding; every token earns its place.

5 / 5

Actionability

Provides concrete commands and paths ('../scripts/case-init.ps1', 'auth.status=granted', '-NetworkProfile lab', the orchestrator SKILL.md path), but deliberately delegates the actual downstream work, leaving minor gaps.

4 / 5

Workflow Clarity

Clear sequenced steps with an explicit auth-gate validation ('auth.status=granted 前禁止对真实外网 ACT') and a completion self-check checklist; the bulk of downstream validation is handed off to the orchestrator.

4 / 5

Progressive Disclosure

Well-organized sections (ACTION REQUIRED, 为什么单独一层, 自检) with one-level-deep, clearly-signaled external references; the referenced files live outside this bundle and cannot be verified in-bundle.

4 / 5

Total

17

/

20

Passed

Description

82%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tight, well-targeted description with explicit what/when guidance and strong bilingual trigger terms. Slightly limited only by the abstractness of its action vocabulary.

DimensionReasoningScore

Specificity

Names the domain ('CTF / AWD / 靶场 multi-type orchestration') and 1-2 concrete actions ('Hands off to the sidecar CTF-Sandbox-Orchestrator', 'Thin PRIMARY'), but the actions are somewhat abstract and coverage is not comprehensive.

3 / 5

Completeness

Explicitly answers 'what' (thin PRIMARY for multi-type orchestration, hands off to sidecar) and 'when' with concrete trigger phrases plus a boundary condition ('no more specific pwn/APK/IDA route already won').

5 / 5

Trigger Term Quality

Strong natural keyword coverage across both English and Chinese ('CTF, AWD, 靶场, or 比赛题' plus 'pwn/APK/IDA'), which a user would genuinely say; a few synonyms/variants are missing.

4 / 5

Distinctiveness Conflict Risk

Clear CTF/靶场 niche with distinct triggers and an explicit deferral to more specific pwn/APK/IDA routes, keeping conflict risk minimal.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.