RadarTopicsBuildersWeeklyReads
Open Source Radar
ljagiello/

ctf-skills

GitHubWebsite

ctf-skills provides agent-style skills for tackling CTF challenges, with installation via npx and environment tooling scripts for tool setup. It includes a categorized Skills table and references Friday Studio for workflow integration.

2.9kstars
342forks
2issues
MITlicense
2026since
Star historydaily snapshots by VibeCrowd

Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).

Alternatives & relatedmatched by topic overlap
sickn33/
agentic-awesome-skills
▲ 328/wk

AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 2,000+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

44k6.5kPython
wshobson/
agents
▲ 148/wk

Multi-harness agentic plugin marketplace for Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, and Gemini CLI

38k4.1kPython
ComposioHQ/
awesome-claude-skills
▲ 585/wk

A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows

72k8.1kPython
DeusData/
codebase-memory-mcp
▲ 1.2k/wk

High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.

37k3.0kC
iOfficeAI/
AionUi
▲ 405/wk

Free, local, open-source 24/7 Cowork app for OpenClaw, Hermes Agent, Claude Code, Codex, OpenCode, Gemini CLI and 20+ more CLI | Customize your assistants | Star if you like it!

31k3.2kTypeScript
VoltAgent/
awesome-agent-skills
▲ 426/wk

A curated collection of 1000+ agent skills from official dev teams and the community, compatible with Claude Code, Codex, Gemini CLI, Cursor, and more.

30k3.2k
Reviewgenerated from repository data · Aug 5, 2026

What it is

"ctf-skills" provides Agent Skills for solving CTF challenges across web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more. It works with any tool that supports the Agent Skills spec, including Claude Code.

How it works

The project offers a set of skills (e.g., ctf-web, ctf-pwn, etc.) that can be loaded into an agent context. It includes documentation for integration with Friday Studio, which loads skills into agent context on demand and runs them inside reproducible workspaces. Skills can be referenced from a workspace or loaded automatically based on descriptions.

Getting started

Install via:

npx skills add ljagiello/ctf-skills

Environment setup options are provided, including pre-install and on-demand strategies:

  • Pre-install: use the central installer entrypoint
bash scripts/install_ctf_tools.sh all

Narrow modes include commands like:

bash scripts/install_ctf_tools.sh python
bash scripts/install_ctf_tools.sh apt

Preview with:

bash scripts/install_ctf_tools.sh --dry-run all

Verify with:

bash scripts/install_ctf_tools.sh --verify

Use --force to reinstall everything; logs are saved to ~/.ctf-tools/. On-demand usage: each skill's SKILL.md lists Prerequisites; install per tool when encountered.

Recent releases

No releases are listed in the repository metadata. The latest RELEASES section shows: "latest 0: - none".

Traction

Stars: 2919 Forks: 342 Open issues: 2 Language: Python License: MIT Created: 2026-02-01 Last push: 2026-07-31

Behind the repo

Linked integration mentions Friday Studio by Tempest Labs, with steps to import skills by reference (e.g., ljagiello/ctf-skills/ctf-web).

Caveats

License: MIT. No explicit caveats beyond the standard usage notes provided in the README about dependencies and environment tooling.

Agent skills inside · 11
All skills →
ctf-webProvides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, browser client, template engine, identity flow, or smart-contract frontend/backend surface, including XSS, SQLi, SSTI, SSRF, XXE, JWT, auth bypass, file upload, request smuggling, OAuth/OIDC, SAML, prototype pollution, and similar web bugs. Do not use it for native binary memory corruption, reverse engineering of standalone executables, disk or memory forensics, or pure cryptanalysis unless the web flaw is still the main path to the flag.Securityctf-pwnProvides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel exploitation, seccomp bypass, sandbox escape, or Windows/Linux exploit chains. Do not use it when the main blocker is understanding what the binary does; use reverse engineering first. Do not use it for pure web bugs, disk or packet forensics, or standalone crypto/math challenges.AI & Agentsctf-reverseProvides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.Code Review & Qualityctf-cryptoProvides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.Otherctf-forensicsProvides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, Volatility, PCAP, Docker images, coredumps, side-channel power traces, DTMF audio spectrograms, packet timing analysis, CD audio disc images, or recovering deleted files and credentials.DevOps & Cloudctf-miscProvides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.Media & Video
SharePost on XLinkedIn
All trending reposRevenue-verified startups →