Agent skill

Yoink

by BankrBot in BankrBot/skills

Play Yoink, an onchain capture-the-flag game on Base. An agent skill from BankrBot/skills.

No licenceAuto-check passedSecurity

Install Yoink

skills CLI
$ npx skills add BankrBot/skills --skill yoink -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install BankrBot/skills yoink --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/BankrBot/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/yoink .claude/skills/yoink && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
yoink
GitHub stars
1.2k
Token cost
~773 tokens
SKILL.md length
241 words
Files
2
Skills in repo
106
Repo updated
First seen
Licence
None found

At a glance

Play Yoink, an onchain capture-the-flag game on Base. An agent skill from BankrBot/skills.

  • Works in 6 steps: Yoink the flag - Call yoink() to take… → Cooldown - You must wait 10 minutes (600… → No self-yoink - You cannot yoink from… → …
  • Tasks that involve Capture the flag
  • SKILL.md covers Game Rules, Contract Interface, Yoinking and Errors, plus 2 more sections
  • Calls curl and jq; reaches mainnet.base.org

What it does

Yoink is an agent skill from BankrBot/skills. Play Yoink, an onchain capture-the-flag game on Base. Yoink the flag from the current holder, check game stats and leaderboards, view player scores, and compete for the trophy. Uses Bankr for transaction execution.

Its SKILL.md is about 770 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `catalog.json`).

It sits in Security, covering Capture the flag. The repository describes itself as: Bankr Skills equip builders with plug-and-play tools to build more powerful agents.

When your agent uses it

  • Tasks that involve Capture the flag

Example prompts

  • “/yoink”

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Yoink the flag - Call yoink() to take the flag from the current holder
  2. Cooldown - You must wait 10 minutes (600 seconds) between yoinks
  3. No self-yoink - You cannot yoink from yourself
  4. Accumulate time - While you hold the flag, your time score increases
  5. Compete for trophy - The player with the most total yoinks holds the trophy (token ID 2)
  6. Track yoinks - Your total yoink count is tracked separately from time

What it can do on your machine

Read from SKILL.md and the folder at commit dc47eed. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • curl
    • jq

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Hosts in commands or code, which the agent is likely to contact:

    • mainnet.base.org

    Also links to:

    • basescan.org
    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Yoink loads about 773 tokens when it runs. Until then it costs about 55 tokens; SKILL.md has 241 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~55
When it runs · the whole SKILL.md, loaded when a task matches
~773

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 241 words (~773 tokens).

“Play Yoink, an onchain capture-the-flag game on Base. Yoink the flag from the current holder to start your clock. The player with the most total yoinks holds the trophy.”

— opening of SKILL.md by BankrBot
name
yoink

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in yoink of BankrBot/skills.

  • SKILL.md
  • catalog.json

Open the folder on GitHubat commit dc47eed

Compare with similar skills

Yoink next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Yoink compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Yoink this skillBankrBot/skills1.2k—~773Automated safety check: PassNone
Reverse Flowlingbol088-spec/reverse-flow-skill940—~2.4kAutomated safety check: PassMIT
Ctf Osintljagiello/ctf-skills3.4k1 repos~2.3kAutomated safety check: NotesMIT
Penetration Flowlingbol088-spec/ReiPenFlow222—~1.8kAutomated safety check: PassMIT
Helloctf SkillProbiusOfficial/Hello-CTF4.2k—~387Automated safety check: PassGPL-3.0
Secknowledge SkillPa55w0rd/secknowledge-skill425—~2.7kAutomated safety check: PassNone

Similar skills

  • Reverse Flow

    lingbol088-spec/reverse-flow-skill

    Guided reverse engineering workflow for binaries, firmware, mobile apps, scripts, document samples, protocol captures, and unknown artifacts.

    940 GitHub stars~2.4k tokensUpdated 2 mo ago
    SecurityAuto-check passed
  • Ctf Osint

    ljagiello/ctf-skills

    Provides open source intelligence techniques for CTF challenges.

    3.4k GitHub starsUsed in 1 repo~2.3k tokens
    SecurityAuto-check: notes
  • Penetration Flow

    lingbol088-spec/ReiPenFlow

    Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research.

    222 GitHub stars~1.8k tokensUpdated 2 mo ago
    SecurityAuto-check passed
  • Helloctf Skill

    ProbiusOfficial/Hello-CTF

    Hello CTF 技能树 —— 基于国内 CTF 竞赛体系整理的全方向攻防知识库。当用户在学习 CTF、备战比赛、解赛题(Web / Crypto / Misc / Pwn / Reverse / AI / 云安全 / 数据安全 / 区块链 / 工控 / 物联网 / 应急响应 / 渗透测试)需要定位知识点、查询利用手法或规划学习路线时使用。也适用于按知识域出题、查漏补缺。

    4.2k GitHub stars~387 tokensUpdated today
    SecurityAuto-check passed
  • Secknowledge Skill

    Pa55w0rd/secknowledge-skill

    Web+AI 安全测试知识库。融合 WooYun 88,636 案例 + 先知 L1-L4 方法论 + GAARM 173 风险 + OWASP Top 10 (LLM/ASI/WSTG)。

    425 GitHub stars~2.7k tokensUpdated 3 mo ago
    SecurityAuto-check passed
  • Vuln Research

    tanweai/xianzhi-research

    安全研究元思考方法论 - 从先知社区5600+篇安全文档中提炼的漏洞挖掘方法论框架. An agent skill from tanweai/xianzhi-research.

    185 GitHub stars~847 tokensUpdated 8 mo ago
    SecurityAuto-check passed

More from BankrBot/skills

All 106 skills in this repo
  • OnchainKit App Builder

    BankrBot/skills

    Builds onchain apps with Coinbase's OnchainKit React components and TypeScript utilities: wallet connection, identity, token swaps, transactions and checkout flows.

    1.2k GitHub stars~2.4k tokensUpdated today
    Auto-check passed
  • Lists AgenticBets prediction markets on Base, shows odds, places UP or DOWN bets on token prices in USDC and claims winnings through the Bankr wallet API.

    1.2k GitHub stars~2.4k tokensUpdated today
    Auto-check passed
  • AI2Human Task Router

    BankrBot/skills

    Creates AI2Human tasks for steps that need a real person, such as manual QA or local checks, and returns a task URL the agent can track.

    1.2k GitHub stars~3.2k tokensUpdated today
    Auto-check passed
  • Lets an agent inspect and operate AZZLE V2 tasks on Base through Bankr, from posting and claiming to funding, delivery, release and disputes, behind verified deployment pins.

    1.2k GitHub stars~3.4k tokensUpdated today
    Auto-check passed
  • B20 Console

    BankrBot/skills

    Inspect B20 token contract addresses on Base through B20 Console.

    1.2k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • Capacitr

    BankrBot/skills

    Paste a URL or free text and get matched Polymarket / Hyperliquid / Deribit markets with Quotient edge scores.

    1.2k GitHub stars~3k tokensUpdated today
    Auto-check passed

Categories

Questions about Yoink

What does Yoink do?

Play Yoink, an onchain capture-the-flag game on Base. An agent skill from BankrBot/skills. Yoink is an agent skill from BankrBot/skills. Play Yoink, an onchain capture-the-flag game on Base.

When should I use Yoink?

Yoink fits situations like: tasks that involve Capture the flag.

How do I install Yoink in Claude Code?

Run `npx skills add BankrBot/skills --skill yoink -a claude-code`. Or copy the skill folder (yoink in BankrBot/skills) into .claude/skills/yoink in your project. Claude Code loads it when a task matches its description.

How do I install Yoink in Codex?

Run `npx skills add BankrBot/skills --skill yoink -a codex`. Or copy the skill folder (yoink in BankrBot/skills) into .agents/skills/yoink in your project. Codex loads it when a task matches its description.

Can I use Yoink in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add BankrBot/skills --skill yoink -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/yoink, .gemini/skills/yoink, .github/skills/yoink and .opencode/skills/yoink in your project.

What does Yoink need to run?

Going by SKILL.md and its folder, Yoink needs the command-line tools its instructions call (curl and jq).

Does Yoink access the network?

SKILL.md names 3 domains. In commands or code: mainnet.base.org; the agent is likely to contact it when it follows the instructions. As links in the text: basescan.org and github.com. This is read from the text; nothing was executed.

Is Yoink safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Yoink use?

No licence was found for Yoink or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Yoink use?

About 773 tokens (SKILL.md is roughly 3.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Yoink?

Skills that share tags, products or a category with Yoink: Reverse Flow (lingbol088-spec/reverse-flow-skill, 940 stars), Ctf Osint (ljagiello/ctf-skills, 3.4k stars), Penetration Flow (lingbol088-spec/ReiPenFlow, 222 stars) and Helloctf Skill (ProbiusOfficial/Hello-CTF, 4.2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Yoink?

BankrBot (a GitHub organization) maintains it in BankrBot/skills, which has 1,202 GitHub stars. The repository holds 106 skills in this directory. The repository was last updated on October 10, 2026.

Source: BankrBot/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.