mcpbeat Sign in

Ctf•新手入口 Agent Skill

面向中文用户和新手的统一入口,保持原有两种模式:1) 自动分流,2) 先头脑风暴再分流。分流目标既可以是 ctf-*,也可以在 Web/接口/漏洞验证阶段增强到 strix-*;适合不知道该用哪个 skill、想先理清题意、又不想自己先判断何时该切到工具链或漏洞专项的场景;触发名:ctf-beginner-hub

2k tokens
context cost
the whole folder, loaded on every use
5
files
instructions only
0
copies elsewhere
how many repositories repackaged it
715
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository
npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill CTF•新手入口

The instruction itself

5 sections, as written by the author

CTF 新手入口

这是给 不会选 skill 的新手 用的统一入口。

它保持和你之前一样的两种模式,只是在需要时把 Strix 当成增强层接进去。

两种模式

模式 1:自动分流(默认推荐)

适合:

  • 已经拿到题面、附件、URL、IP、端口、源码、二进制
  • 不想自己判断分类

流程:

  • 先判断更像哪一类题
  • 再决定是走 ctf-* 还是增强到 strix-*
  • 给你最小化下一步

模式 2:先头脑风暴,再分流

适合:

  • 看不懂题面
  • 不知道第一步做什么
  • 想先理清目标、材料、卡点

流程:

  • 先澄清题目到底给了什么
  • 再判断走 ctf-* 还是增强到 strix-*
  • 再给你最小化下一步

什么情况下还是走原来的 ctf-*

  • Reverse / Pwn / Crypto / Forensics / OSINT / Malware / Misc / AI/ML
  • 还停留在 CTF 大类判断阶段
  • 还没有进入具体 Web 测试动作阶段

什么情况下增强到 strix-*

当题目已经明显进入下面这些动作时:

  • 要探测 URL / 状态码 / 标题 / 路由
  • 要爬路径、跑字典、跑模板扫描
  • 要验证 SQLi / XSS / SSRF / RCE / JWT / IDOR / 上传 / 文件包含

新手默认增强顺序

先用工具类
  • strix-httpx
  • strix-katana
  • strix-ffuf
  • strix-nuclei
  • strix-sqlmap
再用漏洞专项
  • strix-sql-injection
  • strix-xss
  • strix-ssrf
  • strix-rce
  • strix-authentication-jwt
  • strix-idor
  • strix-information-disclosure
  • strix-insecure-file-uploads
  • strix-open-redirect
  • strix-csrf
  • strix-business-logic
  • strix-broken-function-level-authorization
  • strix-path-traversal-lfi-rfi

新手友好输出规范

  • 这题现在更像什么
  • 为什么先走这个 skill
  • 先做哪 1~3 步
  • 每一步是在干什么
  • 如果没结果,下一步切到哪个 skill
  • 术语用一句人话解释

推荐默认策略

如果用户没有指定:

  • 已有附件 / URL / 服务 -> 先走自动分流
  • 只有模糊题面 / 明显很迷茫 -> 先走头脑风暴
  • 已经确定是 Web / 接口题并进入验证阶段 -> 允许增强到 strix-*

结束条件

当主 skill 被确定后:

  • 进入对应 ctf-* 深挖
  • 或增强到对应 strix-*
  • 题做完后转 ctf-writeup

Other skills for the same job

different authors, same section of the catalogue
Protocolsio Integration
by christophacham
×4

Integration with protocols.io API for managing scientific protocols. This skill should be used when working with protocols.io to search, create, update, or publish protocols; manage protocol steps and materials; handle discussions and comments; organize workspaces; upload and manage files; or integrate protocols.io functionality into workflows. Applicable for protocol discovery, collaborative protocol development, experiment tracking, lab protocol management, and scientific documentation.

16k tokens
Tailored Resume Generator
by frostant
×4

Analyzes job descriptions and generates tailored resumes that highlight relevant experience, skills, and achievements to maximize interview chances

3k tokens
Excalidraw Diagram Generator
by github
vendor ×3

Generate Excalidraw diagrams from natural language descriptions. Use when asked to "create a diagram", "make a flowchart", "visualize a process", "draw a system architecture", "create a mind map", or "generate an Excalidraw file". Supports flowcharts, relationship diagrams, mind maps, and system architecture diagrams. Outputs .excalidraw JSON files that can be opened directly in Excalidraw.

36k tokens scripts
Expo Dev Client
by openai
vendor ×3

Build and distribute Expo development clients locally or via TestFlight

961 tokens
Executing Plans
by ZhanlinCui
×3

Use when you have a written implementation plan to execute in a separate session with review checkpoints

542 tokens
Anndata
by christophacham
×3

Data structure for annotated matrices in single-cell analysis. Use when working with .h5ad files or integrating with the scverse ecosystem. This is the data format skill—for analysis workflows use scanpy; for probabilistic models use scvi-tools; for population-scale queries use cellxgene-census.

16k tokens
Benchling Integration
by christophacham
×3

Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation.

14k tokens
Biopython
by christophacham
×3

Comprehensive molecular biology toolkit. Use for sequence manipulation, file parsing (FASTA/GenBank/PDB), phylogenetics, and programmatic NCBI/PubMed access (Bio.Entrez). Best for batch processing, custom bioinformatics pipelines, BLAST automation. For quick lookups use gget; for multi-service integration use bioservices.

24k tokens

How to use it

Copy the folder

Take asdfgh1445/ctf•新手入口 from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.