ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
ctf-skills is a comprehensive Agent Skills package that equips AI assistants with capabilities to solve Capture The Flag (CTF) security challenges across multiple domains including web exploitation, binary exploitation, cryptography, reverse engineering, forensics, and OSINT. Built for the Agent Skills specification and compatible with Claude Code, it provides specialized tooling and techniques for penetration testing competitions. The package includes automated tool installation scripts and works within Friday Studio for workflow orchestration, allowing agents to dynamically load domain-specific skills as challenges are encountered.
Key Features
Use Cases
- 01Participating in competitive CTF security challenges with AI-assisted exploitation and vulnerability discovery
- 02Penetration testing training and skill development with automated tool chains and technique libraries
- 03Security research workflows requiring adversarial AI/ML attacks and model manipulation
- 04Web application security assessment using SQLi, XSS, SSRF, and authentication bypass techniques
- 05Binary reverse engineering and exploit development with heap grooming and ROP chain automation
- 06Cryptographic protocol analysis and attack implementation for RSA, AES, and ECC systems
Related Skills
View moresuperpowers
An agentic skills framework & software development methodology that works.
skills
Skills for Real Engineers. Straight from my .agents directory.
skills
Public repository for Agent Skills
ponytail
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
ctf-skills — FAQ
What is ctf-skills and what does it do?+
ctf-skills is an Agent Skills package that gives AI assistants specialized capabilities for solving Capture The Flag security challenges. It covers web exploitation, binary pwning, cryptography, reverse engineering, forensics, OSINT, and AI/ML attacks, working with any tool that supports the Agent Skills specification including Claude Code.
How do I install ctf-skills for Claude Code?+
Run 'npx skills add ljagiello/ctf-skills' in your terminal to add the skill package. For Friday Studio integration, install Friday from hellofriday.ai, open the Skills sidebar, click Add, and import individual skills by reference (e.g. ljagiello/ctf-skills/ctf-web) or upload the entire repository folder.
Which AI clients and agents work with ctf-skills?+
ctf-skills works with Claude Code and any other AI tool that supports the Agent Skills specification. It also integrates with Friday Studio, a shareable AI workspace runtime that provides workflow orchestration, scheduling, and reproducible execution environments.
Do I need to install CTF tools before using ctf-skills?+
You can pre-install all tools with 'bash scripts/install_ctf_tools.sh all' before competitions, or install on-demand during challenges using the category-specific modes (python, apt, brew, gems, go, manual). Each skill's SKILL.md file lists only the prerequisites needed for that specific category.
Is ctf-skills free and open source?+
Yes, ctf-skills is open source and available on GitHub at ljagiello/ctf-skills. The package itself is free to use; you only need the underlying CTF tools which are installed via the provided setup scripts.
What types of CTF challenges can ctf-skills help solve?+
The package covers seven major CTF domains: web exploitation (SQLi, XSS, SSRF, SSTI), binary pwn (ROP, heap exploitation, format strings), cryptography (RSA, AES, ECC attacks), reverse engineering, forensics, OSINT, and AI/ML adversarial attacks. It includes hundreds of specific techniques and exploits for each category.
How do I install ctf-skills?+
Open the source repository on GitHub and follow its README. ctf-skills is a skill — MCP Agents Market links you directly to the official repo.
Is ctf-skills free?+
ctf-skills is an open-source project hosted on GitHub. Check the repository for its license and any usage requirements.