CTF Security Skills - Setup Guide¶
Source: ljagiello/ctf-skills GitHub: ljagiello/ctf-skills Skills: 12 skills · 71.6K total installs Category: Security / CTF First Seen: catalogued August 15, 2026 evening sweep Quality Tier: 🟡 Trusted (individual publisher, offensive-security content - use for authorized testing and CTF practice only)
A full offensive-security curriculum as agent skills: reverse engineering, web exploitation, binary exploitation (pwn), OSINT, cryptography, forensics, malware analysis, AI/ML challenge work, and writeup generation. Queued in prior sweeps; the publisher page confirms 71.6K installs across 12 skills - the largest security-focused cluster catalogued to date.
Installation¶
npx skills add ljagiello/ctf-skills
Prerequisites¶
| Requirement | Details |
|---|---|
| Node.js + npx | For the skill installer |
| Security toolchain | Ghidra, GDB, Burp Suite, and similar for the respective skills |
| Authorization | Explicit permission for any target you test against |
What It Provides¶
| Skill | Installs | Purpose |
|---|---|---|
| ctf-reverse | 7.4K | Binary and code reverse engineering |
| ctf-web | 7.1K | Web application exploitation |
| ctf-pwn | 6.9K | Binary exploitation |
| ctf-osint | 6.7K | Open-source intelligence gathering |
| ctf-crypto | 6.7K | Cryptographic challenges |
| ctf-forensics | 6.6K | Digital forensics |
| solve-challenge | 6.5K | End-to-end challenge solving |
| ctf-misc | 6.4K | Miscellaneous challenge techniques |
| ctf-malware | 6.3K | Malware analysis |
| ctf-writeup | 5.5K | Writeup and documentation generation |
| ctf-ai-ml | 5.4K | AI/ML security challenges |
| find-skills | 7 | Skill discovery helper |
Quick Start¶
- Install:
npx skills add ljagiello/ctf-skills - Start with
solve-challengefor the general workflow, then load category-specific skills - Ask: "analyze this binary and produce a writeup of the vulnerability"
CorpusIQ Use Cases¶
| Use Case | How |
|---|---|
| Security posture work | ctf-web and ctf-reverse as structured checklists for our own penetration passes |
| OSINT workflows | ctf-osint as a methodology reference for competitive and market research |
| Security content | Writeup patterns for security-focused documentation |
| Agent capability | A reference for what an agent can do in a security analyst role |
Integration with CorpusIQ¶
CorpusIQ is the connector layer that lets AI assistants read the systems a business already runs on - accounting, payments, CRM, email, files and analytics - and answer with the source named. It is read-only by design: it retrieves data and never writes to, or acts in, a connected system, which is what makes it safe to point at live accounts.
This page is part of the CorpusIQ directory, the reference we maintain for the MCP server and agent-skill ecosystem. Run alongside CorpusIQ, a third-party server like this one can be combined with a company's own business data in a single answer.
Limitations / Verification¶
- Publisher-page install counts verified; individual skill audit pages were not fetched for this multi-skill suite
- Offensive techniques - only use against systems you own or are explicitly authorized to test
- Skills assume CTF-style targets; adapting to production systems requires additional judgment
npx skills add ljagiello/ctf-skills # verify install works
Related¶
Powered by CorpusIQ