Agent skill

Misc

杂项技术，包括隐写术、流量分析、编码转换、取证分析、AI 安全等非传统 CTF 分类. An agent skill from MuWinds/BUUCTF_Agent.

Apache-2.0Auto-check passedSecurity

Install Misc

skills CLI

$ npx skills add MuWinds/BUUCTF_Agent --skill misc -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install MuWinds/BUUCTF_Agent misc --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/MuWinds/BUUCTF_Agent.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/misc .claude/skills/misc && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "misc" agent skill from https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc into .claude/skills/misc/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "misc", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add MuWinds/BUUCTF_Agent --skill misc -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install MuWinds/BUUCTF_Agent misc --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/MuWinds/BUUCTF_Agent.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/misc .agents/skills/misc && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "misc" agent skill from https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc into .agents/skills/misc/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "misc", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add MuWinds/BUUCTF_Agent --skill misc -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install MuWinds/BUUCTF_Agent misc --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/MuWinds/BUUCTF_Agent.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/misc .cursor/skills/misc && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "misc" agent skill from https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc into .cursor/skills/misc/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "misc", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/MuWinds/BUUCTF_Agent.git --path skills/misc

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add MuWinds/BUUCTF_Agent --skill misc -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install MuWinds/BUUCTF_Agent misc --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/MuWinds/BUUCTF_Agent.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/misc .gemini/skills/misc && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "misc" agent skill from https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc into .gemini/skills/misc/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "misc", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install MuWinds/BUUCTF_Agent misc

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add MuWinds/BUUCTF_Agent --skill misc -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/MuWinds/BUUCTF_Agent.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/misc .github/skills/misc && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "misc" agent skill from https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc into .github/skills/misc/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "misc", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add MuWinds/BUUCTF_Agent --skill misc -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install MuWinds/BUUCTF_Agent misc --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/MuWinds/BUUCTF_Agent.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/misc .opencode/skills/misc && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "misc" agent skill from https://github.com/MuWinds/BUUCTF_Agent/tree/main/skills/misc into .opencode/skills/misc/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "misc", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: misc
GitHub stars: 267
Token cost: ~504 tokens
SKILL.md length: 126 words
Files: 1
Skills in repo: 3
Repo updated: Sep 5, 2026
First seen: Oct 7, 2026
Licence: Apache-2.0

At a glance

杂项技术，包括隐写术、流量分析、编码转换、取证分析、AI 安全等非传统 CTF 分类. An agent skill from MuWinds/BUUCTF_Agent.

Works in 4 steps: 协议统计：Statistics -> Protocol Hierarchy → 会话分析：Statistics -> Conversations → 字符串搜索：Strings (Ctrl+F) 搜索 flag、password… → …
Tasks that involve Capture the flag
SKILL.md covers 隐写术 (Steganography), 流量分析, 取证分析 and 编码与转换, plus 1 more section
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Misc is an agent skill from MuWinds/BUUCTF_Agent. 杂项技术，包括隐写术、流量分析、编码转换、取证分析、AI 安全等非传统 CTF 分类。

Its SKILL.md is about 500 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Capture the flag. The repository describes itself as: 专为CTF设计的可扩展AI Agent，可自动解CTF题，也能与用户协作交互解题~. The licence is Apache-2.0.

When your agent uses it

Tasks that involve Capture the flag

Example prompts

“/misc”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

协议统计：Statistics -> Protocol Hierarchy
会话分析：Statistics -> Conversations
字符串搜索：Strings (Ctrl+F) 搜索 flag、password 等关键字
导出对象：File -> Export Objects -> HTTP/DNS/SMB

What it can do on your machine

Read from SKILL.md and the folder at commit 95cc9e0. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Misc loads about 504 tokens when it runs. Until then it costs about 12 tokens; SKILL.md has 126 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~12
When it runs · the whole SKILL.md, loaded when a task matches: ~504

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from MuWinds/BUUCTF_Agent at commit 95cc9e0, republished under its Apache-2.0 licence (© MuWinds). 126 words, ~504 tokens.

Download SKILL.mdSave it as .claude/skills/misc/SKILL.md (or your agent's skills folder).

name: misc
description: 杂项技术，包括隐写术、流量分析、编码转换、取证分析、AI 安全等非传统 CTF 分类。
tags: steganography, forensics, traffic-analysis, encoding, osint

杂项 (Misc) 方法论

隐写术 (Steganography)

图片隐写

基础检查：file、exiftool 查看元数据、strings 搜索隐藏文本
LSB 隐写：stegsolve 查看各 bit plane、zsteg 自动检测
文件拼接：binwalk -e 提取嵌入文件、foremost 文件恢复
GIF 隐写：逐帧分析，identify 分解帧
PNG：检查 IDAT 块、CRC 校验、IEND 之后的数据
JPG：检查 EXIF 注释、APP 段、EOI 之后的数据
盲水印：频域分析、两张图片异或

音频隐写

频谱图：Audacity 或 sox 查看频谱，可能隐藏图像
LSB：音频 LSB 嵌入数据
DTMF：电话拨号音编码
SSTV：慢扫描电视信号，RX-SSTV 解码

文本隐写

零宽字符：Unicode 零宽空格/连接符隐藏信息
Snow：空白字符（空格、Tab）编码
Unicode 同形字：视觉相同但编码不同的字符

流量分析

PCAP 分析流程

协议统计：Statistics -> Protocol Hierarchy
会话分析：Statistics -> Conversations
字符串搜索：Strings (Ctrl+F) 搜索 flag、password 等关键字
导出对象：File -> Export Objects -> HTTP/DNS/SMB

常见协议

HTTP：追踪流 (Follow TCP Stream)，检查请求/响应体
DNS：子域名编码数据（DNS tunneling）
FTP：ftp-data 传输的文件内容
SMTP/POP3：邮件内容和附件
USB：键盘流量还原击键（HID usage ID 表）
蓝牙：L2CAP 数据重组

工具

bash

tshark -r capture.pcap          # 命令行 Wireshark
tshark -r cap.pcap -Y "http"    # 过滤 HTTP
tcpflow -r capture.pcap         # TCP 流重组
NetworkMiner                    # 网络取证工具

取证分析

磁盘取证

Autopsy/Sleuth Kit：磁盘镜像分析
文件恢复：photorec、testdisk
时间线分析：fls、mactime

内存取证

Volatility：内存镜像分析框架
常用命令：
- imageinfo：识别操作系统
- pslist/psscan：进程列表
- filescan/dumpfiles：文件恢复
- hashdump：提取密码哈希
- clipboard：剪贴板内容

系统日志

Windows：事件日志 (.evtx)、注册表、Prefetch
Linux：/var/log/、.bash_history、/etc/passwd

编码与转换

CyberChef：在线编解码瑞士军刀
常见编码：Base64/32/16、URL、HTML entity、Unicode
进制转换：二进制、八进制、十进制、十六进制
摩尔斯电码：. - 编码
猪圈密码：图形替换密码
旗语：手旗信号编码

OSINT (开源情报)

图片搜索：Google 以图搜图、TinEye
元数据：exiftool 提取 GPS 坐标、设备信息
社工：用户名搜索、社交媒体分析
Wayback Machine：网页历史快照

Files

Just SKILL.md in skills/misc of MuWinds/BUUCTF_Agent.

Open the folder on GitHubat commit 95cc9e0

Compare with similar skills

Misc next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Misc compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Misc this skillMuWinds/BUUCTF_Agent	267	—	~504	Automated safety check: Pass	Apache-2.0	1 mo ago
Reverse Flowlingbol088-spec/reverse-flow-skill	936	—	~2.4k	Automated safety check: Pass	MIT	2 mo ago
Ctf Osintljagiello/ctf-skills	3.4k	2 repos	~2.3k	Automated safety check: Notes	MIT	24 days ago
Penetration Flowlingbol088-spec/ReiPenFlow	222	—	~1.8k	Automated safety check: Pass	MIT	2 mo ago
Helloctf SkillProbiusOfficial/Hello-CTF	4.2k	—	~387	Automated safety check: Pass	GPL-3.0	today
Alibabacloud Ecs Sec Kernelaliyun/alibabacloud-ecs-troubleshoot-skills	148	1 repos	~2.4k	Automated safety check: Notes	Apache-2.0	1 mo ago

Similar skills

Reverse Flow
lingbol088-spec/reverse-flow-skill
Guided reverse engineering workflow for binaries, firmware, mobile apps, scripts, document samples, protocol captures, and unknown artifacts.
936 GitHub stars~2.4k tokensUpdated 2 mo ago
SecurityAuto-check passed
Ctf Osint
ljagiello/ctf-skills
Provides open source intelligence techniques for CTF challenges.
3.4k GitHub starsUsed in 2 repos~2.3k tokens
SecurityAuto-check: notes
Penetration Flow
lingbol088-spec/ReiPenFlow
Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research.
222 GitHub stars~1.8k tokensUpdated 2 mo ago
SecurityAuto-check passed
Helloctf Skill
ProbiusOfficial/Hello-CTF
Hello CTF 技能树 —— 基于国内 CTF 竞赛体系整理的全方向攻防知识库。当用户在学习 CTF、备战比赛、解赛题（Web / Crypto / Misc / Pwn / Reverse / AI / 云安全 / 数据安全 / 区块链 / 工控 / 物联网 / 应急响应 / 渗透测试）需要定位知识点、查询利用手法或规划学习路线时使用。也适用于按知识域出题、查漏补缺。
4.2k GitHub stars~387 tokensUpdated today
SecurityAuto-check passed
Alibabacloud Ecs Sec Kernel
aliyun/alibabacloud-ecs-troubleshoot-skills
Linux 内核态 CVE 漏洞检测与 PoC 验证工具，专为 AI Agent 设计. An agent skill from aliyun/alibabacloud-ecs-troubleshoot-skills.
148 GitHub starsUsed in 1 repo~2.4k tokens
SecurityAuto-check: notes
Ctf Malware
ljagiello/ctf-skills
Provides malware analysis and network traffic techniques for CTF challenges.
3.4k GitHub starsUsed in 1 repo~2.1k tokens
SecurityAuto-check: notes

Questions about Misc

What does Misc do?

杂项技术，包括隐写术、流量分析、编码转换、取证分析、AI 安全等非传统 CTF 分类. An agent skill from MuWinds/BUUCTF_Agent. Misc is an agent skill from MuWinds/BUUCTF_Agent.

When should I use Misc?

Misc fits situations like: tasks that involve Capture the flag.

How do I install Misc in Claude Code?

Run `npx skills add MuWinds/BUUCTF_Agent --skill misc -a claude-code`. Or copy the skill folder (skills/misc in MuWinds/BUUCTF_Agent) into .claude/skills/misc in your project. Claude Code loads it when a task matches its description.

How do I install Misc in Codex?

Run `npx skills add MuWinds/BUUCTF_Agent --skill misc -a codex`. Or copy the skill folder (skills/misc in MuWinds/BUUCTF_Agent) into .agents/skills/misc in your project. Codex loads it when a task matches its description.

Can I use Misc in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add MuWinds/BUUCTF_Agent --skill misc -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/misc, .gemini/skills/misc, .github/skills/misc and .opencode/skills/misc in your project.

What does Misc need to run?

SKILL.md names no scripts, command-line tools or credentials: Misc is instructions for the agent only.

Does Misc access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Misc safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Misc use?

Misc is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Misc use?

About 504 tokens (SKILL.md is roughly 2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Misc?

Skills that share tags, products or a category with Misc: Reverse Flow (lingbol088-spec/reverse-flow-skill, 936 stars), Ctf Osint (ljagiello/ctf-skills, 3.4k stars), Penetration Flow (lingbol088-spec/ReiPenFlow, 222 stars) and Helloctf Skill (ProbiusOfficial/Hello-CTF, 4.2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Misc?

MuWinds (a GitHub user) maintains it in MuWinds/BUUCTF_Agent, which has 267 GitHub stars. The repository holds 3 skills in this directory. The repository was last updated on September 5, 2026.

Source: MuWinds/BUUCTF_Agent on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Misc

Facts

At a glance

What it does

When your agent uses it

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

杂项 (Misc) 方法论

隐写术 (Steganography)

图片隐写

音频隐写

文本隐写

流量分析

PCAP 分析流程

常见协议

工具

取证分析

磁盘取证

内存取证

系统日志

编码与转换

OSINT (开源情报)

Files

Compare with similar skills

Similar skills

More from MuWinds/BUUCTF_Agent

Related

Questions about Misc