Skills/ClawHub/ctf-crypto-solver

ctf-crypto-solver@1.0.0

CAUTION· static only

Publisher claims: "Crypto密码学解题助手：RSA/AES/ECC/格/PRNG/哈希/签名攻击的识别与求解脚本开发。遇到 crypto、RSA、AES、CBC、padding oracle、格、LWE、PRNG、签名伪造类题目时使用。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher yxy050208 · publishing for 73 daysInstalls 461Last detonated 12 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-08 and scored it 67/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Cipher/encoding reference; Cipher/encoding reference; Cipher/encoding reference. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Cipher/encoding referencereferences/ctf-crypto/SKILL.md:106 · Cipher/encoding reference — may contain obfuscated instructions- **Polybius square cipher:** 5x5 grid maps letter pairs to plaintext; digits/coordinates encode positions. See [classic-ciphers.md](classic-ciphers.md#polybius-square-cipher-qiwi-infosec-2016).Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
LOW
Cipher/encoding referencereferences/ctf-crypto/classic-ciphers.md:6 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file- [Polybius Square Cipher (Qiwi-Infosec 2016)](#polybius-square-cipher-qiwi-infosec-2016)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Cipher/encoding referencereferences/ctf-crypto/SKILL.md:93 · Cipher/encoding reference — may contain obfuscated instructions- **Caesar:** Frequency analysis or brute force 26 keysFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
LOW
Cipher/encoding referencereferences/ctf-crypto/classic-ciphers.md:144 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file## Polybius Square Cipher (Qiwi-Infosec 2016)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
LOW
Cipher/encoding referencereferences/ctf-crypto/classic-ciphers.md:152 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file"""Decrypt Polybius square cipher (pairs of digits 1-5)"""Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
LOW
Cipher/encoding referencereferences/ctf-crypto/exotic-crypto.md:425 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file## Icosahedral Symmetry Group Cipher (BSidesSF 2026)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Cipher/encoding referencereferences/ctf-crypto/SKILL.md:104 · Cipher/encoding reference — may contain obfuscated instructions…able-length-homophonic-substitution-asis-ctf-finals-2013). - **Grid permutation cipher:** 5x5 grid with independent row/column permutations collapses keyspace to 5! x …Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
LOW
Cipher/encoding referencereferences/ctf-crypto/exotic-crypto.md:12 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file- [Icosahedral Symmetry Group Cipher (BSidesSF 2026)](#icosahedral-symmetry-group-cipher-bsidessf-2026)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Cipher/encoding referencereferences/ctf-crypto/SKILL.md:194 · Cipher/encoding reference — may contain obfuscated instructions…eserving-encryption-feistel-brute-force-bsidessf-2026) - **Icosahedral symmetry cipher:** Dodecahedron face permutations form order-120 group; build lookup table of al…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Privileged sudo commandSKILL.md:17 · Privileged sudo command — agent may execute with elevated privilegesLinux `sudo apt install sagemath`；Windows 建议走 WSL。Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

Cost to the agent

Instructions loaded
≈10,509 tok
2 files · 19 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

13 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim yxy050208: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim yxy050208Propose a patch to the maintainer