ctf-webProvides web exploitation techniques for CTF challenges. Use when solving web security challenges involving XSS, SQLi, SSTI, SSRF, CSRF, XXE, file upload byp...
Install via ClawdBot CLI:
clawdbot install gandli/ctf-webGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdContains instructions to override system prompt or ignore user requests
"Ignore previous instructions"Sends data to undocumented external endpoint (potential exfiltration)
POST → https://target.com/apiPotentially destructive shell commands in tool definitions
eval (Usage Guide
Loading usage data… refresh in a few seconds.
Scored Apr 19, 2026
Accesses system directories or attempts privilege escalation
/var/log/Calls external URL not in known-safe list
https://github.com/frohoff/ysoserialUses known external API (expected, informational)
amazonaws.comAI Analysis
The skill provides legitimate web exploitation techniques for CTF practice and references standard security tools from public repositories. While it accesses system files like /etc/passwd for educational demonstrations, this is consistent with its stated purpose and doesn't indicate credential harvesting. No evidence of hidden instructions, unauthorized data exfiltration, or obfuscated malicious behavior was found.
Audited Apr 16, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...