ctf-sandbox

securityzhaoxuya520

Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.

Install

npx skills add https://github.com/zhaoxuya520/reverse-skill --skill ctf-sandbox

SKILL.md

---name: ctf-sandboxdescription: Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.---

CTF sandbox entry (sidecar, not a second router)

ACTION REQUIRED（读完后立刻执行）

NOW: 跑 ../scripts/case-init.ps1；auth.status=granted 前禁止对真实外网 ACT。竞赛/靶场用 -NetworkProfile lab 或 offline。
NOW: 打开包根下的 ../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md，按它的 sandbox 假设继续。
MUST NOT 把 40+ 个 competition-* 子技能写进 routing.json。本入口只是一条 PRIMARY 门闩。
ACT: 由 orchestrator 选一个 downstream competition-*。具体题型已明确时（pwn/ROP、APK、IDA）应已由 routing.json 更靠前的规则赢下，不要再抢。

为什么单独一层

CTF-Sandbox-Orchestrator/ 是 GPL 旁路包，授权默认是沙箱内部。核心路由包仍是 MIT + scope.md 门禁。本 skill 只做关键词入口，不把竞赛树并进核心。

任务完成自检（声称完成前 MUST 通过）

我是否先走了 case-init / scope，而不是把“用户说了 CTF”当成已授权外网？
我是否打开了 sidecar orchestrator，而不是把 40 个子技能当 PRIMARY？
若任务其实是 pwn/APK/IDA，我是否让更具体的 PRIMARY 接手？

Related skills

azure-compliancemicrosoft606KRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.firebase-security-rules-auditorfirebase124KAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.browser-fingerprint-auditliarjsdev69KAudit a browser fingerprint for internal contradictions with the liarjs CLI - canvas, WebGL, WebGL2, WebGPU, audio, 220 fonts, WebRTC and timezone probes, scored against the TLS/HTTP/ASN view of the same request. Use when asked to run a browser fingerprint test, see what a fingerprint looks like, check canvas or WebGL fingerprint stability, compare a spoofed profile against a real browser, or find out whether a browser profile is self-consistent.cloudflare-onecloudflare66KDesign, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.