Use when the user mentions CTF, capture the flag, a challenge, jeopardy, attack-defense, king of the hill, boot2root, HackTheBox/picoCTF/CTFtime, asks to find/submit a flag, triage challenge files (binary, pcap, image, disk dump, APK, contracts), or wants CTF methodology or writeups. This is the router: sets up the workspace, triages, and dispatches to ctf-pwn, ctf-rev, ctf-crypto, ctf-web, ctf-forensics, ctf-misc, ctf-blockchain, ctf-mobile, ctf-attack-defense, ctf-boot2root.
cp -r cryptoskill/skills/chains/riegan-ctf .claude/skills/clawhub install riegan-ctfCapabilities below are detected automatically by an open-source scanner that reads the skill's text and scripts (see how this is computed). Not measured means the scanner couldn't make a confident call — it is NOT a green check, and you should treat it as a possible red flag until a human or a stronger scanner has measured it.
unknown
We did not find any well-known hosted services in this skill's text or scripts. This does NOT mean the skill is local-only — it might use services we don't yet recognize, or talk to them through code paths our scanner can't reach. A complete dependency list (every package, library, and binary, with integrity hashes) is on the roadmap; today we only show recognized hosts.
No one has audited this skill yet. That is different from “audited and clean” — it just means no professional reviewer (a security firm, the CryptoSkill team, or a verified independent researcher) has signed off on it. There are no audit reports to read. How reviewer levels work →
SKILL.md → SOURCE.md → TRUST.auto.yaml → Browse directory →
Auto-generated by cryptoskill/extract-capabilities/0.3.1 · hosted-service list version 2026-09-06 · how this is computed