Name: competition-websocket-runtime
Author: zhaoxuya520

Imported from zhaoxuya520/reverse-skill (CTF-Sandbox-Orchestrator/competition-websocket-runtime/SKILL.md). Install upstream with npx skills add zhaoxuya520/reverse-skill --skill competition-websocket-runtime. Copyright stays with the author.

Competition WebSocket Runtime

Use this skill only as a downstream specialization after $ctf-sandbox-orchestrator is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to $ctf-sandbox-orchestrator first.

Use this skill when the decisive behavior is carried by realtime handshake and frame flow rather than one-shot HTTP alone.

Reply in Simplified Chinese unless the user explicitly requests English.

Quick Start

Map the handshake first: origin, path, headers, cookies, query, auth token, and upgrade response.
Separate connection setup, subscription messages, keepalives, server pushes, and reconnect logic.
Record message schema, topic or channel identity, and state side effects in one chain.
Tie frames to rendered, stored, or backend-visible effects.
Reproduce the smallest handshake-plus-frame sequence that reaches the decisive state change.

Workflow

1. Map The Realtime Handshake

Record the initial HTTP or SSE request, upgrade headers, cookies, tokens, query params, origin checks, and negotiated protocol.
Note whether auth material is carried by headers, cookies, query strings, or initial application frames.
Keep route, subscription endpoint, and session identity tied together.

2. Decode Message Flow

Separate subscribe, unsubscribe, ack, heartbeat, server push, reconnect, and terminal frames.
Recover message types, channel IDs, schema fields, and sequencing that matter to behavior.
Distinguish transport keepalive from application-level business messages.

3. Reduce To The Decisive Realtime Path

Compress the result to the smallest sequence: handshake -> auth or subscribe frame -> pushed or accepted frame -> resulting state change.
Keep canonical frame order and any replayed minimal order side by side.
If the hard part is generic protocol reassembly without runtime UI or app-state linkage, switch back to the tighter protocol skill.

Read This Reference

Load references/websocket-runtime.md for the handshake checklist, frame checklist, and evidence packaging.

What To Preserve

Handshake headers, cookies, query params, auth material, negotiated subprotocol, and channel IDs
Frame schemas, subscription messages, server pushes, reconnect flow, and resulting state changes
The smallest replayable realtime sequence that proves the decisive branch

Install competition-websocket-runtime and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "zhaoxuya520-reverse-skill-competition-websocket-runtime", "kind": "skill", "name": "competition-websocket-runtime", "description": "Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for WebSocket and SSE handshakes, auth material, subscription state, realtime message schemas, reconnect behavior, and frame-driven runtime effects. Use when the user asks to inspect a WebSocket or SSE handshake, decode frames, trace subscriptions, follow reconnect logic, inspect auth material sent during realtime setup, or explain how live frames change rendered or persisted state. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.", "publisher": "zhaoxuya520", "version": "1.0.0", "capabilities": { "domains": [ "customer_support" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for WebSocket and SSE handshakes, auth material, subscription state, realtime message schemas, reconnect behavior, and frame-driven runtime effects. Use when the user asks to inspect a WebSocket or SSE handshake, decode frames, trace subscriptions, follow reconnect logic, inspect auth material sent during realtime setup, or explain how live frames change rendered or persisted state. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/zhaoxuya520/reverse-skill", "path": "CTF-Sandbox-Orchestrator/competition-websocket-runtime/SKILL.md", "ref": "HEAD", "url": "https://github.com/zhaoxuya520/reverse-skill/blob/HEAD/CTF-Sandbox-Orchestrator/competition-websocket-runtime/SKILL.md", "key": "zhaoxuya520/reverse-skill/CTF-Sandbox-Orchestrator/competition-websocket-runtime/SKILL.md" } }, "instructions": "# Competition WebSocket Runtime\n\nUse this skill only as a downstream specialization after `$ctf-sandbox-orchestrator` is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to `$ctf-sandbox-orchestrator` first.\n\nUse this skill when the decisive behavior is carried by realtime handshake and frame flow rather than one-shot HTTP alone.\n\nReply in Simplified Chinese unless the user explicitly requests English.\n\n## Quick Start\n\n1. Map the handshake first: origin, path, headers, cookies, query, auth token, and upgrade r", "cost": { "context_tokens": 609 } }

competition-websocket-runtime

About