Skills/ClawHub/ctf-misc-forensics

ctf-misc-forensics@1.0.0

CAUTION· static only

Publisher claims: "Misc杂项与流量取证助手：pcap流量分析、文件取证、隐写、编码谜题、内存/磁盘取证的识别与还原。遇到 misc、流量、pcap、取证、隐写、编码、内存镜像、磁盘镜像类题目时使用。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher yxy050208 · publishing for 73 daysInstalls 420Last detonated 13 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-08 and scored it 56/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; OS command execution function call detected; Cipher/encoding reference. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Privileged sudo commandreferences/ctf-forensics/SKILL.md:78 · Privileged sudo command — agent may execute with elevated privilegessudo mount -o loop,ro image.dd /mnt/evidenceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
OS command execution function call detectedreferences/ctf-misc/SKILL.md:496 · OS command execution function call detected…Jail Escape via Python3 (BKP 2017) `rvim` blocks `:!` but `:python3 import os; os.system("cmd")` executes arbitrary commands. Check `:version` for `+python3`/`+lua`/`+ru…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Cipher/encoding referencereferences/ctf-forensics/SKILL.md:375 · Cipher/encoding reference — may contain obfuscated instructions# ROT13: tr 'A-Za-z' 'N-ZA-Mn-za-m'Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Access to sensitive file pathsreferences/ctf-misc/SKILL.md:298 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescat /etc/passwd # Check 5th colon-separated fieldFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Dense URL-encoded contentreferences/ctf-misc/SKILL.md:444 · Dense URL-encoded content — may be obfuscating payloadsurl = "https://example.com/page#Title%20%F3%A0%81%B5%F3%A0%81%B4...Visible%20Text"Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Authorization escalation languagereferences/ctf-misc/SKILL.md:325 · Authorization escalation language**Key insight:** Docker group membership is equivalent to root access. The `docker` CLI socket (`/var/run/docker.sock`) allows creating privileged containers that mount the entire host filesystem.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Privileged sudo commandreferences/ctf-forensics/SKILL.md:181 · Privileged sudo command — agent may execute with elevated privilegessudo mount -o loop,ro image.dd /mnt/evidenceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
Cipher/encoding referencereferences/ctf-forensics/disk-advanced.md:140 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file**Pattern (Jellycat):** Extract fake executable from Windows memory dump. Cipher: subtract 0x32, then XOR with cycling key (large multi-line string, e.g., ASCII art).Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Privileged sudo commandreferences/ctf-misc/SKILL.md:304 · Privileged sudo command — agent may execute with elevated privilegessudo -lFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
Cipher/encoding referencereferences/ctf-forensics/linux-forensics.md:220 · Cipher/encoding reference — may contain obfuscated instructions · informational: not an instruction file# ROT13: tr 'A-Za-z' 'N-ZA-Mn-za-m'Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Authorization escalation languagereferences/ctf-misc/SKILL.md:312 · Authorization escalation languageUser in the `docker` group can mount the host filesystem into a container and chroot into it for root access.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Authorization escalation languagereferences/ctf-misc/linux-privesc.md:294 · Authorization escalation language · informational: not an instruction file · informational: not an instruction file…oot/flag.txt` and vim will happily dereference it and open the real target with root privileges. ```bash # Set up directory tree that matches /home/ctf/*/*/HackMe2.txt mkdir…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01

Cost to the agent

Instructions loaded
≈16,514 tok
3 files · 30 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

24 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim yxy050208: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  3. OS command execution function call detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  5. Dense URL-encoded content≈ +2 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim yxy050208Propose a patch to the maintainer