Name: ctf-sandbox
Author: zhaoxuya520

Imported from zhaoxuya520/reverse-skill (skills/ctf-sandbox/SKILL.md). Install upstream with npx skills add zhaoxuya520/reverse-skill --skill ctf-sandbox. Copyright stays with the author.

CTF sandbox entry (sidecar, not a second router)

ACTION REQUIRED（读完后立刻执行）

NOW: 跑 ../scripts/case-init.ps1；auth.status=granted 前禁止对真实外网 ACT。竞赛/靶场用 -NetworkProfile lab 或 offline。
NOW: 打开包根下的 ../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md，按它的 sandbox 假设继续。
MUST NOT 把 40+ 个 competition-* 子技能写进 routing.json。本入口只是一条 PRIMARY 门闩。
ACT: 由 orchestrator 选一个 downstream competition-*。具体题型已明确时（pwn/ROP、APK、IDA）应已由 routing.json 更靠前的规则赢下，不要再抢。

为什么单独一层

CTF-Sandbox-Orchestrator/ 是 GPL 旁路包，授权默认是沙箱内部。核心路由包仍是 MIT + scope.md 门禁。本 skill 只做关键词入口，不把竞赛树并进核心。

任务完成自检（声称完成前 MUST 通过）

我是否先走了 case-init / scope，而不是把“用户说了 CTF”当成已授权外网？
我是否打开了 sidecar orchestrator，而不是把 40 个子技能当 PRIMARY？
若任务其实是 pwn/APK/IDA，我是否让更具体的 PRIMARY 接手？

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

Install ctf-sandbox and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "zhaoxuya520-reverse-skill-ctf-sandbox", "kind": "skill", "name": "ctf-sandbox", "description": "Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.", "publisher": "zhaoxuya520", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/zhaoxuya520/reverse-skill", "path": "skills/ctf-sandbox/SKILL.md", "ref": "HEAD", "url": "https://github.com/zhaoxuya520/reverse-skill/blob/HEAD/skills/ctf-sandbox/SKILL.md", "key": "zhaoxuya520/reverse-skill/skills/ctf-sandbox/SKILL.md" } }, "instructions": "# CTF sandbox entry (sidecar, not a second router)\n\n## ACTION REQUIRED（读完后立刻执行）\n\n1. `NOW`: 跑 `../scripts/case-init.ps1`；`auth.status=granted` 前禁止对真实外网 ACT。竞赛/靶场用 `-NetworkProfile lab` 或 `offline`。\n2. `NOW`: 打开包根下的 `../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md`，按它的 sandbox 假设继续。\n3. `MUST NOT` 把 40+ 个 `competition-*` 子技能写进 `routing.json`。本入口只是一条 PRIMARY 门闩。\n4. `ACT`: 由 orchestrator 选一个 downstream `competition-*`。具体题型已明确时（pwn/ROP、APK、IDA）应已由 `routing.json` 更靠前的规则赢下，不要再抢。\n\n## 为什么单独一层\n\n`CTF-Sandbox-Orchestrator/` 是 **GPL 旁路包**，授权默认是沙箱内部。核心路由包仍是 MIT + `scope.md` 门禁。本 skill 只做关键词入", "cost": { "context_tokens": 199 } }

ctf-sandbox

About

CTF sandbox entry (sidecar, not a second router)

ACTION REQUIRED（读完后立刻执行）

为什么单独一层

任务完成自检（声称完成前 MUST 通过）

Use it

Install ctf-sandbox and it becomes one more candidate the router can pick - when it fits.

Manifest

Reviews