ctf-solver-claude仅在用户明确使用 /ctf-solver 指令或显式说"调用CTF技能/skill"时才触发,不自动响应任何CTF相关关键词。 本技能以夺取flag为唯一目标,调用大量工具、深度分析题目,给出完整的解题过程和可执行的攻击链。
Install via ClawdBot CLI:
clawdbot install hermes186/ctf-solver-claudeGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdSends data to undocumented external endpoint (potential exfiltration)
webhook → https://webhook.sitePotentially destructive shell commands in tool definitions
eval(Accesses system directories or attempts privilege escalation
/var/log/Usage Guide
Loading usage data… refresh in a few seconds.
Scored Jun 6, 2026
Calls external URL not in known-safe list
http://target/...AI Analysis
The skill is designed for CTF (Capture The Flag) challenges, which inherently involve security testing tools and techniques. The flagged patterns (e.g., /etc/passwd, webhook.site, eval()) are typical in CTF contexts for legitimate challenge-solving, not for malicious data exfiltration or credential harvesting. The external URLs are placeholders for target challenges, not unauthorized data sinks. No hidden instructions override user intent or system safety beyond the stated CTF purpose.
Audited May 10, 2026 · audit v1.0
西瓜视频数据查询助手。覆盖视频详情、用户数据、搜索、评论等全功能。
快手全场景数据查询助手。支持App和Web双端API,覆盖视频详情、用户数据、搜索、热榜、直播、评论等全功能。
Lemon8 内容数据查询助手。覆盖搜索、发现页、帖子详情、用户信息、评论、话题、热搜等全功能。
临时邮箱服务助手。支持生成临时邮箱、获取邮件列表和邮件详情。
皮皮虾数据查询助手。覆盖作品详情、用户数据、搜索、热搜、评论、话题等全功能。
Read, paginate, and analyze inquiry data from the Bee Website Builder platform, with support for multi-language filtering, field selection, and structured re...