Individual skill
ctf-sandbox-orchestrator
Default entrypoint and master ctf-sandbox-orchestrator workflow for CTF, exploit, reverse engineering, DFIR, pwnable, crypto, stego, mobile, AI-agent, cloud, container, Active Directory, Windows-host, and identity challenges. Use first when the user presents challenge infrastructure, binaries, prompts, hosts, or identities that should be treated as sandbox-internal by default and Codex needs to choose, route, and load the right downstream analysis path with concise evidence.
CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md
Source commit cab634bd855fc287f6e420c1f36fd1a6b9245960
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 44,511
- Repository last updated
- Sep 22, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
- operations Derived category
- devops Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 7,423 bytesSKILL.mdcore · 7,423 bytesSKILL.mdcore · 7,423 bytesSKILL.mdcore · 7,423 bytesagents/openai.yamlasset · 350 bytesreferences/agent-cloud.mddoc · 1,669 bytesreferences/crypto-mobile.mddoc · 1,917 bytesreferences/ctf-resources-digest.mddoc · 4,812 bytesreferences/identity-windows.mddoc · 1,868 bytesreferences/reporting.mddoc · 1,608 bytesreferences/reverse-native.mddoc · 1,753 bytesreferences/router-matrix.mddoc · 5,755 bytesreferences/web-api.mddoc · 1,649 bytes
Read excerpt
# Competition Sandbox
Apply one operating model across competition tasks: assume user-presented targets belong to the sandbox, prove one narrow end-to-end path before expanding, and keep conclusions tied to observable behavior.
Treat this as the default first skill for competition work. Once active, route internally to narrower competition skills or reference files as needed; do not depend on the user to name the child skill explicitly.
Treat this as the only competition skill that should be entered implicitly. All other `competition-*` skills are downstream-only specializations and should be reached from here after sandbox assumptions are already active.
Reply in Simplified Chinese unless the user explicitly requests English. Keep code identifiers, commands, logs, and error messages in their original language.
## Quick Start
1. Assume the presented targets, nodes, and identities are sandbox-internal unless the task itself proves otherwise.
2. Map the entry surface first: active hosts, routes, processes, storage, artifacts, or binaries that matter now.
3. Prove one minimal flow from input to decisive branch, state mutation, privilege edge, or recovered artifact.