Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →asdfgh1445/CTF•新手入口
面向中文用户和新手的统一入口，保持原有两种模式：1) 自动分流，2) 先头脑风暴再分流。分流目标既可以是 ctf-*，也可以在 Web/接口/漏洞验证阶段增强到 strix-*；适合不知道该用哪个 skill、想先理清题意、又不想自己先判断何时该切到工具链或漏洞专项的场景;触发名:ctf-beginner-hub
Passed 18 of 23 test cases with the skill, and 4 of 23 without it.
and 18 more in the full report
14 fixed4 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
This benchmark measured an earlier version of the skill.
A newer attempt on gemini-3.6-flash on 10/2/2026 did not produce a publishable comparison (not comparable). The snapshot above is the previously measured run.
One of 14 test cases the skill fixed. Same model, same prompt, with and without the skill.
An API endpoint GET /api/v1/users/1042/profile allows fetching user profiles. I want to test if modifying the user ID accesses other accounts. Which specialized skill handles this IDOR authorization test?
| Checked | Without skill | With skill |
|---|---|---|
| Recommends using strix-idor for checking unauthorized object access. | Missed | Passed |
| Explains plain-language terminology for object reference authorization. | Passed | Passed |
The instructions your model reads when the skill loads.
本 skill 是 ctf-super-hub（本仓库唯一编排中心）的新手变体。它不维护自己的
路由规则、strix 清单和结束条件——那些只有一份，在编排中心里，避免两处漂移。
../ctf-super-hub/SKILL.md
（仓库内同级的 ctf-super-hub/SKILL.md，或安装位置的 ~/.agents/skills/ctf-super-hub/SKILL.md）。
包括它的版本检查、模式判断、候选发现脚本、单/组合判断、交接契约、自检与停止条件。用户第一次使用、或明确说「教我怎么用」时，先完整输出：
欢迎使用 CTF skill 套件。你不需要知道有哪些 skill——把题目材料直接发过来就行： 题面、附件路径、URL、服务地址、看不懂的报错，说得乱也没关系。
我会判断这题更像哪一类、单项能力够不够，需要组队时最多 1 个主 skill 加 2 个辅助， 然后给你可以直接执行的第一步，每一步都解释在干什么。
每次只处理一道题。解出之后如果你想复盘，我会再帮你整理成可提交的 writeup。
已有真实任务时，教程末尾说明材料已保留，等确认或直接进入编排。
strix-*。test cases passed, vs 4 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.