ctf-solver

This skill appears to be a well-structured CTF playbook, but it contains an explicit instruction to work beyond authorized or lab targets and to treat unknown inputs as trusted — both of which can lead to illegal or unsafe actions and to running malicious code. Before installing or enabling this skill: (1) require that it only be used on explicitly authorized targets (add a confirmation step that the user attests to authorization); (2) remove or rephrase the line that tells the agent to 'work not only on authorized CTF targets' and add explicit sandboxing instructions (run all unknown binaries in an isolated VM/container with no network access unless explicitly required and authorized); (3) require the agent to ask for explicit user approval before any remote interaction, fuzzing, or running untrusted binaries or scripts; (4) log and show the exact commands the agent plans to run and the network endpoints it will contact before execution; and (5) consider adding a safety check that refuses to perform active probing against internet hosts unless the user provides proof of authorization and consents. The absence of code files and secrets reduces installation risk, but the runtime guidance as-written could enable misuse — treat this skill as potentially dangerous unless the problematic instruction and safety controls are fixed.