Ctf Malware
Ctf Malware is an agent skill (a SKILL.md file) from ljagiello/ctf-skills. It provides malware analysis and network traffic techniques for CTF challenges. It works with Claude Code, Codex, Gemini CLI and OpenCode and has 3,530 GitHub stars across a repository of 3 listed skills.
github.com/ljagiello/ctf-skills/ctf-malware (opens in a new tab)
Data as of from the GitHub API; description from the skill's SKILL.md. Report an error
- Multi-skill repo
- Security
- Maintained
Add this skill
Claude
Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):
git clone --depth 1 https://github.com/ljagiello/ctf-skills.git
cp -r ctf-skills/ctf-malware ~/.claude/skills/ctf-malware # personal, or .claude/skills in a projectIn the Claude apps, zip the ctf-malware folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/ljagiello/ctf-skills.git
cp -r ctf-skills/ctf-malware .agents/skills/ctf-malware # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/ljagiello/ctf-skills.git
cp -r ctf-skills/ctf-malware .cursor/skills/ctf-malware # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and…
When it triggers
- Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.
More skills in ljagiello/ctf-skills
3 skills are listed from this repository.
Similar skills
More security skills
Agentwhy Session Audit
davepoon/buildwithclaude
Checks which private files (.env, keys, secrets) Claude Code and its subagents reached in this project, whether a value came into an agent's context, and which key to change, by running the open…
Maintained · last commit Oct 26, 2026
SecurityPythonComet Review
rpamis/comet
Manually review the implementation diff for the current Comet change.
Active · last commit Oct 22, 2026
SecurityJavaScriptPinme R2
glitternetwork/pinme
Use when a PinMe Cloudflare Worker needs R2 object storage, including secure file or image upload, streaming download, metadata lookup, deletion, listing, Range requests, or R2+D1 coordination.
Maintained · last commit Jul 12, 2026
SecurityTypeScriptOrchestrator Container Spawn
samugit83/redamon
Spawning and hardening scan containers from the recon orchestrator: the security flags that look correct and break the container, and the sibling bind-mount path handling.
Active · last commit Oct 22, 2026
SecurityPythonCriticism Self Criticism
HughYau/qiushi-skill
批评与自我批评:在工作完成、阶段验收、收到批评或同类错误反复出现时,对成果和过程做诚实、具体、基于事实的审视,输出可执行的改进项,并处理外来批评而不辩解。触发信号包括 review、复盘、审查、"帮我看看有没有问题"、"你确定吗";任务刚开始或只是单步查询时不触发。 English: Criticism and self-criticism.
Maintained · last commit Oct 1, 2026
SecurityJavaScriptLoop Library
Forward-Future/loopy
Compatibility alias for Loopy. Use only when an existing installation or older instruction explicitly invokes loop-library; use Loopy for new installations and requests.
Maintained · last commit Jul 7, 2026
SecurityJavaScript
How do I install the Ctf Malware skill?
Copy the ctf-malware folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.
Is the Ctf Malware skill free?
Yes. The repository is open source under the MIT license.
Is Ctf Malware maintained?
The repository's most recent commit was on Oct 26, 2026. appsgit only lists skills from repositories with a commit in the last six months.