Agent skill

CTF•恶意软件分析

用于混淆脚本、恶意样本、自定义加密协议、C2 流量、PE/.NET 二进制、RC4/AES 通信、YARA、shellcode、进程注入与反分析等恶意软件类 CTF 题;触发名:ctf-malware

asdfgh1445582★ · 1 repos on radarProfile →
codexclaude-codecan modify filesNOASSERTION
Install
npx skills add asdfgh1445/ctf-super-hub --skill ctf-malware --agent codex

Same command for any agent — swap --agent for claude-code, cursor, copilot.

Facts
Files in the skill folder: 4
SKILL.md size: 8 KB
Bundled scripts: none
Allowed tools: BashReadWriteEditGlobGrepTaskWebFetchWebSearch
Requires: Requires filesystem-based agent (Claude Code or similar) with bash, Python 3, and internet access for tool installation.
Path: ctf-malware/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 718
Language: JavaScript
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# CTF Malware & Network Analysis Quick reference for malware analysis CTF challenges. Each technique has a one-liner here; see supporting files for full details with code. ## Prerequisites **Python packages (all platforms):** ```bash pip install yara-python pefile capstone oletools unicorn pycryptodome \ volatility3 dissect.cobaltstrike ``` **Linux (apt):** ```bash apt install strace ltrace tshark

More from ctf-super-hub
All skills →
About this skill
What does the CTF•恶意软件分析 skill do?

用于混淆脚本、恶意样本、自定义加密协议、C2 流量、PE/.NET 二进制、RC4/AES 通信、YARA、shellcode、进程注入与反分析等恶意软件类 CTF 题;触发名:ctf-malware

How do I install it?

Run `npx skills add asdfgh1445/ctf-super-hub --skill ctf-malware --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From asdfgh1445/ctf-super-hub, a repository with 718 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going