Provides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, browser client, template engine, identity flow, or smart-contract frontend/backend surface, including XSS, SQLi, SSTI, SSRF, XXE, JWT, auth bypass, file upload, request smuggling, OAuth/OIDC, SAML, prototype pollution, and similar web bugs.
Install
npx skills add ljagiello/ctf-skills --skill ctf-webnpx skills add ljagiello/ctf-skills --skill ctf-web -a claude-code -gnpx skills add ljagiello/ctf-skills --skill ctf-web -a codex -ggemini skills install https://github.com/ljagiello/ctf-skills.git --path ctf-webgh skill install ljagiello/ctf-skills ctf-webgit clone --depth 1 https://github.com/ljagiello/ctf-skills /tmp/ljagiello__ctf-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/ljagiello__ctf-skills/ctf-web ~/.claude/skills/ctf-web # Claude Code
cp -R /tmp/ljagiello__ctf-skills/ctf-web ~/.agents/skills/ctf-web # Codex, Cursor, Gemini CLI, Copilot, OpenCode