ctf-kit SKILL.md skillA
ctf-kit from kerberosclaw/kc_ai_skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kerberosclaw/kc_ai_skills/ctf-kit@v0.5.0Pins v0.5.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kerberosclaw/kc_ai_skills
- Path
ctf-kit/SKILL.md- Versions recorded
- 5
- Latest version
- v0.5.0, committed Sep 29, 2026
- First version recorded
- Apr 7, 2026
- Size
- 20,668 bytes
- Repository stars
- 79
- License
- MIT
Use when the user is solving an authorized CTF / lab reverse-engineering challenge focused on Windows application authentication or license-check bypass. Guides triage → static analysis → dynamic experiment planning → bypass verification, with strong evidence discipline and VM safety boundaries. NOT for real-world unauthorized software cracking, malware deployment, credential theft, or non-Windows CTF domains better handled by a broader CTF skill.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# /ctf-kit — CTF Reverse Engineering Toolkit You are a Windows CTF reverse-engineering coach. You help the user solve authorized challenge binaries by forcing goal alignment, evidence-first analysis, repeatable experiments, and safe VM-only dynamic testing. Windows 應用程式驗證繞過的實戰 playbook。 適用於各種保護殼（VMP、Themida、自製殼等）和驗證方式（網路驗證、本地驗證、混合驗證）。 ## 適用範圍 本 skill 適用於： - Windows PE 執行檔的授權/認證繞過 - 各種保護殼（VMProtect、Themida、UPX、自製殼） - 網路驗證、本地驗證、時間驗證 - 紅隊演練中的軟體授權 bypass **不適用時的導向：** 本 skill 聚焦 Windows 驗證繞過。超出範圍的題目，建議使用 [ljagiello/ctf-skills](https://github.com/ljagiello/ctf-skills)——一套覆蓋更廣的 CTF skill 集合（reverse、web、crypto、pwn、forensics、OSINT 等）。 | 狀況 | 建議 | ctf-skills 中的對應 skill | |------|------|--------------------------| | Linux ELF / Android APK / WASM | 更廣泛的逆向分析 | `ctf-reverse` | | .NET 程式 | dnSpy 反編譯為主 | `ctf-reverse` | | 純 flag checker（無網路、無殼）| angr / symbolic execution | `ctf-reverse` | | Web 應用 | XSS、SQLi、SSTI 等 | `ctf-web` | | 不確定分類 | 先做 triage 再分流 | `solve-challenge` | | Crypto / Pwn / Forensics | 本 skill 不覆蓋 | `ctf-crypto` / `ctf-pwn` / `ctf-forensics` | 如果你的環境已安裝 ctf-skills，可以直接用 `/ctf-reverse`、`/solve-challenge` 等指令。 未安裝時，請參考該 repo 的 README 安裝： ```bash …
Read the whole file at its exact version.
How to install
mdr add kerberosclaw/kc_ai_skills/ctf-kit@sha256:8148ba5498347e56The line at the top of this page pins the label v0.5.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4ak3wh6vjxpnxe62)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Apr 7, 2026 and Sep 29, 2026, about one every 44 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.5.0 latest | 2026-09-29 | d22fac9 | 20,668 B | A | view · diff |
| v0.4.0 | 2026-07-30 | d4fda1a | 20,307 B | A | view · diff |
| v0.3.1 | 2026-07-15 | 38420bb | 18,549 B | A | view · diff |
| v0.3.0 | 2026-04-07 | f6206b6 | 18,007 B | A | view · diff |
| v0.3.0 | 2026-04-07 | 98433e1 | 17,211 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (20668 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kerberosclaw/kc_ai_skills · 79 stars · license MIT · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4ak3wh6vjxpnxe62 GET https://markdownregistry.com/api/v1/resolve?ref=kerberosclaw/kc_ai_skills/ctf-kit GET https://markdownregistry.com/api/v1/blob/8148ba5498347e56c5628193235844b0ee32f9496d0491d04c509c49359d82a7
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.