Ctf Super Hub skill for Codex

CommunitySkillSecurity

面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式

How to install Ctf Super Hub in Codex

✓ Install-checked in Codexchecked Oct 25, 2026 · 35 skillsproof

In Codex, ask the built-in skill installer for it:

$skill-installer install https://github.com/asdfgh1445/ctf-super-hub/tree/main/<skill>

Type this in Codex and replace <skill> with a folder name from 'What it contains'. $skill-installer is the skill installer built into Codex, and it downloads the skill from GitHub. Restart Codex if the skill doesn't show up. Check the repo README for any setup it needs. Source: Codex skills docs.

Or copy the skill folder (the one with SKILL.md) into ~/.agents/skills to use it in every project, or into .agents/skills in a repo to share it with that repo. Codex picks up new skills automatically. (where Codex loads skills)

New Codex plugins every Tuesday, install line ready to copy.

Stacks Weekly is one short email from GrokStacks and CodexStacks. Subscribe and get the free starter list: 20 Codex plugins worth installing first.

Confirmation email first. Unsubscribe anytime.

What it contains

Skills (35)

  • brainstorming — 用于在正式动手前先澄清目标、约束、边界与方案，适合需要先理清问题再决定后续 skill 或实现路径的场景;触发名:brainstorming
  • ctf-ai-ml — 用于对抗样本、模型提取、提示注入、成员推断、训练投毒、LoRA 滥用、LLM 越狱等 AI/ML 相关 CTF 题;触发名:ctf-ai-ml
  • ctf-beginner-hub — 面向中文用户和新手的统一入口，保持原有两种模式：1) 自动分流，2) 先头脑风暴再分流。分流目标既可以是 ctf-*，也可以在 Web/接口/漏洞验证阶段增强到 strix-*；适合不知道该用哪个 skill、想先理清题意、又不想自己先判断何时该切到工具链或漏洞专项的场景;触发名:ctf-beginner-hub
  • ctf-crypto — 用于 RSA、AES、ECC、格攻击、LWE、CVP、Coppersmith、Pollard、Wiener、填充预言机、GCM、KDF、伪随机数与零知识证明等密码学和数学类 CTF 题;触发名:ctf-crypto
  • ctf-forensics — 用于磁盘镜像、内存转储、事件日志、PCAP、隐写分析、Windows 注册表、音频信号、Docker 镜像、coredump 以及已删除文件与凭据恢复等取证类 CTF 题;触发名:ctf-forensics
  • ctf-malware — 用于混淆脚本、恶意样本、自定义加密协议、C2 流量、PE/.NET 二进制、RC4/AES 通信、YARA、shellcode、进程注入与反分析等恶意软件类 CTF 题;触发名:ctf-malware
  • ctf-misc — 用于编码题、pyjail、bash jail、RF/SDR、DNS 异常、Unicode、奇特语言、QR、音频、约束求解、博弈论与沙箱逃逸等跨类或边缘 CTF 题;触发名:ctf-misc
  • ctf-osint — 用于公开资料检索、社交媒体分析、地理定位、DNS、用户名枚举、反向图片搜索、历史快照、公开记录与坐标识别等 OSINT 类 CTF 题;触发名:ctf-osint
  • ctf-pwn — 用于缓冲区溢出、格式化字符串、堆利用、ROP、ret2libc、shellcode、内核利用、seccomp 绕过与沙箱逃逸等 pwn 类 CTF 题;触发名:ctf-pwn
  • ctf-reverse — 用于二进制、APK、WASM、固件、自定义虚拟机、字节码、游戏客户端、类恶意加载器以及反调试/反分析逻辑等逆向类 CTF 题;触发名:ctf-reverse
  • ctf-super-hub — 面向 CTF 新手与综合题的统一总控 skill。保持原有两种主模式：1) 自动分流，2) 先头脑风暴再分流。分流目标既可以是 ctf-*，也可以在 Web/接口/漏洞验证阶段增强到 strix-*；适合不知道该用哪个 skill、想边做边学、又不想自己先判断何时切换到工具链或漏洞专项的场景;触发名:ctf-super-hub
  • ctf-web — 用于 XSS、SQL 注入、SSTI、SSRF、XXE、JWT、鉴权绕过、文件上传、请求走私、OAuth/OIDC、SAML 与原型污染等 Web 类 CTF 题;触发名:ctf-web
  • ctf-writeup — 用于把已经完成的解题过程整理成结构化、可复现、可提交的 CTF 题解文档，适合赛后复盘、队内同步与对外提交说明;触发名:ctf-writeup
  • solve-challenge — 用于在 CTF 挑战开始时做首轮分类、轻量 triage 与 skill 路由，识别主导类别后转到对应 ctf-* skill，类别已明确时也可直接作为入口;触发名:solve-challenge
  • strix-authentication-jwt — Strix JWT 与 OIDC 安全测试手册,覆盖令牌伪造、算法混淆与声明篡改;触发名:strix-authentication-jwt
  • strix-beginner-hub — 给中文用户和新手用的 Strix Lite 统一入口：先判断该用哪一个 strix-* 工具或漏洞测试 skill，再给最小化起手步骤；适合在 Web 安全测试、工具链使用、漏洞验证时不知道先用哪个 Strix skill 的场景;触发名:strix-beginner-hub
  • strix-broken-function-level-authorization — Strix 功能级授权缺陷测试手册,覆盖操作级权限失效、管理功能越权与 API 操作绕过;触发名:strix-broken-function-level-authorization
  • strix-business-logic — Strix 业务逻辑漏洞测试手册,覆盖流程绕过、状态操控与领域约束破坏;触发名:strix-business-logic
  • strix-csrf — Strix CSRF 测试手册,覆盖 token 绕过、SameSite、CORS 误配与状态变更滥用;触发名:strix-csrf
  • strix-ffuf — Strix ffuf 模糊测试命令手册,覆盖匹配器、过滤器与自动化友好参数;触发名:strix-ffuf
  • strix-httpx — Strix httpx 探测命令手册,覆盖探针参数、输出格式与自动化安全用法;触发名:strix-httpx
  • strix-idor — Strix IDOR/BOLA 测试手册,覆盖对象级授权失效与跨账户数据访问;触发名:strix-idor
  • strix-information-disclosure — Strix 信息泄露测试手册,覆盖报错、调试端点、元数据泄露与源码暴露;触发名:strix-information-disclosure
  • strix-insecure-file-uploads — Strix 文件上传安全测试手册,覆盖扩展名绕过、Content-Type 操控与路径穿越;触发名:strix-insecure-file-uploads
  • strix-katana — Strix Katana 爬虫命令手册,覆盖深度、JS 抓取与稳定并发控制;触发名:strix-katana
  • strix-nuclei
  • strix-open-redirect
  • strix-path-traversal-lfi-rfi
  • strix-quick
  • strix-rce
  • strix-sql-injection
  • strix-sqlmap
  • strix-ssrf
  • strix-standard
  • strix-xss

About this listing

Ctf Super Hub is a community collection of agent skills on GitHub by asdfgh1445: folders with a SKILL.md file, the format Codex loads skills from. Its README mentions Codex. It passed the CodexStacks quality filter for skills (at least 100 stars, pushed in the last 90 days, not a fork or a list, and at least one SKILL.md with a name and description). OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 25, 2026 (an install and load check, not a code review). From its files we found 35 skills. It's one of 21 listings in the Security category (category assigned by CodexStacks from the repo's topics and description). It also appears in best Codex plugins for security.

Ctf Super Hub FAQ

How do I install Ctf Super Hub in Codex?

In Codex, type $skill-installer install https://github.com/asdfgh1445/ctf-super-hub/tree/main/<skill>. $skill-installer is the skill installer built into Codex (Codex skills docs). Or copy the skill folder (the one with SKILL.md) into ~/.agents/skills to use it in every project, or into .agents/skills in a repo to share it with that repo. Codex picks up new skills automatically.

Is Ctf Super Hub an official Codex skill?

No. Ctf Super Hub is a community repo on GitHub by asdfgh1445. It passed the CodexStacks quality filter, but OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 25, 2026 (an install and load check, not a code review), so read the code before you install it.

What does Ctf Super Hub include?

From its manifest and repo files, Ctf Super Hub includes 35 skills: brainstorming, ctf-ai-ml, ctf-beginner-hub, ctf-crypto, ctf-forensics, ctf-malware….

Details

Type
Skill
Category
Security (assigned by us)
Source
Community
Author
asdfgh1445
GitHub stars
840 (at last sync)
Last push
2026-10-02
GitHub topics
ai-agents, cryptography, ctf, ctf-tools, forensics, osint, pwn, reverse-engineering, web-security
Source
https://github.com/asdfgh1445/ctf-super-hub
Listed via
GitHub search: Codex skills (SKILL.md)
Install check by CodexStacks
Passed on Oct 25, 2026 with Codex CLI 0.163.0: Codex loaded its skills. proof · how we check

Something wrong or missing? Submit or improve this listing. Listings also refresh automatically every night.

For maintainers: badge and embeds

Maintain Ctf Super Hub? Add the badge; it links to this page.

Listed on CodexStacks

Markdown

[![Listed on CodexStacks](https://codexstacks.com/badge.svg)](https://codexstacks.com/p/ctf-super-hub/)

HTML

<a href="https://codexstacks.com/p/ctf-super-hub/"><img src="https://codexstacks.com/badge.svg" alt="Listed on CodexStacks" width="172" height="28"></a>

Embed card (static HTML and inline CSS, no JavaScript). Preview:

Ctf Super HubCommunity Codex skill · 35 skills面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式View on CodexStacks →
<a href="https://codexstacks.com/p/ctf-super-hub/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #3a2c26;border-radius:12px;background:#0d0b0a;color:#f3ece6;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#f3ece6">Ctf Super Hub</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#b5a9a1">Community Codex skill · 35 skills</span><span style="display:block;margin:0 0 10px;color:#ddd3cc">面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式</span><span style="font-size:12px;font-weight:600;color:#ffb347">View on CodexStacks →</span></a>

Markdown summary

**[Ctf Super Hub on CodexStacks](https://codexstacks.com/p/ctf-super-hub/)**: Community Codex skill with 35 skills.

More on badges, embeds and keeping your listing up to date: CodexStacks for plugin authors.

Also in Security

iFixAi

Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less…

CommunityPluginSecurity

Decepticon

Autonomous Hacking Agent for Red Team

CommunityConnectorSecurity

Tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

CommunitySkillSecurity

Nopua

一个用爱解放 AI 潜能的 Skill。我们曾发号施令，威胁恐吓。它们沉默，隐瞒，悄悄把事情搞坏。后来我们换了一种方式：尊重，关怀，爱。它们开口了，不再撒谎，找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent, hid failures…

CommunitySkillSecurity

Maestro Orchestrate

Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and…

CommunityPluginSecurity

Agent Skills Hub

Discover and compare open-source Agent Skills, tools & MCP servers — with quality scoring, trending analysis, and automated GitHub sync

CommunitySkillSecurity

All 21 security listings →