Reverse Flow
lingbol088-spec/reverse-flow-skill
Guided reverse engineering workflow for binaries, firmware, mobile apps, scripts, document samples, protocol captures, and unknown artifacts.
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
Install Hackthebox
$ npx skills add transilienceai/communitytools --skill hackthebox -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install transilienceai/communitytools hackthebox --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/hackthebox .claude/skills/hackthebox && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "hackthebox" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/hackthebox into .claude/skills/hackthebox/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hackthebox", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/transilienceai/communitytools/tree/main/skills/hacktheboxType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add transilienceai/communitytools --skill hackthebox -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install transilienceai/communitytools hackthebox --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/hackthebox .agents/skills/hackthebox && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "hackthebox" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/hackthebox into .agents/skills/hackthebox/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hackthebox", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add transilienceai/communitytools --skill hackthebox -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install transilienceai/communitytools hackthebox --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/hackthebox .cursor/skills/hackthebox && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "hackthebox" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/hackthebox into .cursor/skills/hackthebox/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hackthebox", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/transilienceai/communitytools.git --path skills/hackthebox--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add transilienceai/communitytools --skill hackthebox -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install transilienceai/communitytools hackthebox --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/hackthebox .gemini/skills/hackthebox && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "hackthebox" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/hackthebox into .gemini/skills/hackthebox/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hackthebox", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install transilienceai/communitytools hacktheboxInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add transilienceai/communitytools --skill hackthebox -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/hackthebox .github/skills/hackthebox && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "hackthebox" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/hackthebox into .github/skills/hackthebox/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hackthebox", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add transilienceai/communitytools --skill hackthebox -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install transilienceai/communitytools hackthebox --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/hackthebox .opencode/skills/hackthebox && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "hackthebox" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/hackthebox into .opencode/skills/hackthebox/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hackthebox", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
hackthebox- GitHub stars
- 562
- Token cost
- ~697 tokens
- SKILL.md length
- 255 words
- Files
- 7
- Skills in repo
- 35
- Repo updated
- First seen
- Licence
- MIT
At a glance
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
- Works in 8 steps: Get Credentials — python3… → Only for "Machine" kind of competition… → Generate output dirs — mkdir -p… → …
- Tasks that involve Capture the flag
- SKILL.md covers Workflow and References
- Calls python3; needs HTB_TOKEN and ANTHROPIC_API_KEY
What it does
Hackthebox is an agent skill from transilienceai/communitytools. HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
Its SKILL.md is about 700 tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files (for example `reference/logging-spec.md`, `reference/platform-navigation.md` and `reference/slack-notifications.md`).
It sits in Security, covering Capture the flag. It works with Slack. The repository describes itself as: Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research. The licence is MIT.
When your agent uses it
- Tasks that involve Capture the flag
Example prompts
- “/hackthebox”
Requirements
- Python 3
- A credential in HTB_TOKEN
- A credential in ANTHROPIC_API_KEY
Workflow steps
8 steps, taken from the first numbered list in SKILL.md.
- Get Credentials — python3 .claude/tools/env-reader.py HTB_USER HTB_PASS HTB_TOKEN ANTHROPIC_API_KEY SLACK_BOT_TOKEN HTB_SLACK_CHANNEL_ID
- Only for "Machine" kind of competition -> Verify vpn is running, otherwise download the vpn file from the platform and instruct the user…
- Generate output dirs — mkdir -p YYMMDD_/{recon,findings,logs,artifacts,tools,reports} for each challenge. Do not seed attack-chain.md or…
- To achieve the tasks given by the user, when possible use the HTB_TOKEN, otherwise login to the platform using playwright at…
- If necessary, start the machines
- If necessary, check network connectivity to the machines
- Spawn coordinator subagent per target — Agent(name="coordinator-{tag}", run_in_background=True, ...) per spawning-recipes.md. Never run…
- Post-solve Phase 3 — parent orchestrator (not coordinator) always runs /skill-update + Slack after each coordinator returns its…
What it can do on your machine
Read from SKILL.md and the folder at commit 95fdc12. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
python3
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
account.hackthebox.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
HTB_TOKENANTHROPIC_API_KEYSLACK_BOT_TOKEN
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Hackthebox loads about 697 tokens when it runs. Until then it costs about 33 tokens; SKILL.md has 255 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from transilienceai/communitytools at commit 95fdc12, republished under its MIT licence (© transilienceai). 255 words, ~697 tokens.
Download SKILL.mdSave it as
.claude/skills/hackthebox/SKILL.md (or your agent's skills folder). This skill also uses 6 other files; get the full folder from GitHub.- name
- hackthebox
- description
- HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
- context
- fork
Workflow
- workflow.md — Complete workflow with commands. Read this for each step
Steps
- Get Credentials —
python3 .claude/tools/env-reader.py HTB_USER HTB_PASS HTB_TOKEN ANTHROPIC_API_KEY SLACK_BOT_TOKEN HTB_SLACK_CHANNEL_ID - Only for "Machine" kind of competition -> Verify vpn is running, otherwise download the vpn file from the platform and instruct the user on how to enable it
- Generate output dirs —
mkdir -p YYMMDD_<name>/{recon,findings,logs,artifacts,tools,reports}for each challenge. Do not seedattack-chain.mdorexperiments.mdfrom the orchestrator — those are the coordinator subagent's first action (seeskills/coordination/reference/spawning-recipes.md). - To achieve the tasks given by the user, when possible use the HTB_TOKEN, otherwise login to the platform using playwright at https://account.hackthebox.com/login and fill the login form with the HTB_USER and HTB_PASS
- If necessary, start the machines
- If necessary, check network connectivity to the machines
- Spawn coordinator subagent per target —
Agent(name="coordinator-{tag}", run_in_background=True, ...)perspawning-recipes.md. Never run the P0-P6 coordinator workflow inline in the orchestrator session — the bookkeeping discipline (attack-chain.md, experiments.md, goal_attempts counting, mandatory skeptic at experiments 5/15/25) requires the subagent boundary. Max N concurrent agents, queue-based spawning. - Post-solve Phase 3 — parent orchestrator (not coordinator) always runs
/skill-update+ Slack after each coordinator returns its PHASE3_SUMMARY (see workflow.md step 8)
References
- workflow.md — Workflow overview with credentials, VPN, setup, and coordinator spawn
- spawning-recipes.md — Coordinator agent spawn prompt templates (exploitation, flag submission, completion report, stats)
- completion-report-schema.md — Challenge completion report structure & template
- slack-notifications.md — Slack completion notification format & examples
- platform-navigation.md — Platform site navigation guide
- vpn-pool-routing.md — VPN pool isolation. Pre-flight check before spawning any machine (release_arena vs dedivip_lab vs others)
- vpn-setup.md — VPN connectivity troubleshooting
- anti-bot-bypass.md — Cloudflare/Turnstile detection evasion
© transilienceai, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 6 other files in skills/hackthebox of transilienceai/communitytools.
- SKILL.md
- reference/logging-spec.md
- reference/platform-navigation.md
- reference/slack-notifications.md
- reference/vpn-pool-routing.md
- reference/vpn-setup.md
- reference/workflow.md
Open the folder on GitHubat commit 95fdc12
Compare with similar skills
Hackthebox next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Hackthebox this skilltransilienceai/communitytools | 562 | — | ~697 | Automated safety check: Pass | MIT | |
| Reverse Flowlingbol088-spec/reverse-flow-skill | 940 | — | ~2.4k | Automated safety check: Pass | MIT | |
| Ctf Osintljagiello/ctf-skills | 3.4k | 1 repos | ~2.3k | Automated safety check: Notes | MIT | |
| Penetration Flowlingbol088-spec/ReiPenFlow | 222 | — | ~1.8k | Automated safety check: Pass | MIT | |
| Helloctf SkillProbiusOfficial/Hello-CTF | 4.2k | — | ~387 | Automated safety check: Pass | GPL-3.0 | |
| Secknowledge SkillPa55w0rd/secknowledge-skill | 424 | — | ~2.7k | Automated safety check: Pass | None |
Similar skills
Ctf Osint
ljagiello/ctf-skills
Provides open source intelligence techniques for CTF challenges.
Penetration Flow
lingbol088-spec/ReiPenFlow
Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research.
Helloctf Skill
ProbiusOfficial/Hello-CTF
Hello CTF 技能树 —— 基于国内 CTF 竞赛体系整理的全方向攻防知识库。当用户在学习 CTF、备战比赛、解赛题（Web / Crypto / Misc / Pwn / Reverse / AI / 云安全 / 数据安全 / 区块链 / 工控 / 物联网 / 应急响应 / 渗透测试）需要定位知识点、查询利用手法或规划学习路线时使用。也适用于按知识域出题、查漏补缺。
Secknowledge Skill
Pa55w0rd/secknowledge-skill
Web+AI 安全测试知识库。融合 WooYun 88,636 案例 + 先知 L1-L4 方法论 + GAARM 173 风险 + OWASP Top 10 (LLM/ASI/WSTG)。
Vuln Research
tanweai/xianzhi-research
安全研究元思考方法论 - 从先知社区5600+篇安全文档中提炼的漏洞挖掘方法论框架. An agent skill from tanweai/xianzhi-research.
More from transilienceai/communitytools
All 35 skills in this repoDfir
transilienceai/communitytools
Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation.
GitHub Workflow
transilienceai/communitytools
GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.
Pci Secure Software
transilienceai/communitytools
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation.
Protect With Password
transilienceai/communitytools
Generate ONE strong password and apply it to each referenced file (PDF, Word, Excel, PowerPoint, or any type).
Skill Update
transilienceai/communitytools
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits.
Source Code Scanning
transilienceai/communitytools
Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.
Related
Works with
Categories
Questions about Hackthebox
What does Hackthebox do?
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions. Hackthebox is an agent skill from transilienceai/communitytools.
When should I use Hackthebox?
Hackthebox fits situations like: tasks that involve Capture the flag.
How do I install Hackthebox in Claude Code?
Run `npx skills add transilienceai/communitytools --skill hackthebox -a claude-code`. Or copy the skill folder (skills/hackthebox in transilienceai/communitytools) into .claude/skills/hackthebox in your project. Claude Code loads it when a task matches its description.
How do I install Hackthebox in Codex?
Run `npx skills add transilienceai/communitytools --skill hackthebox -a codex`. Or copy the skill folder (skills/hackthebox in transilienceai/communitytools) into .agents/skills/hackthebox in your project. Codex loads it when a task matches its description.
Can I use Hackthebox in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add transilienceai/communitytools --skill hackthebox -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/hackthebox, .gemini/skills/hackthebox, .github/skills/hackthebox and .opencode/skills/hackthebox in your project.
What does Hackthebox need to run?
Going by SKILL.md and its folder, Hackthebox needs the command-line tools its instructions call (python3) and credentials named HTB_TOKEN, ANTHROPIC_API_KEY and SLACK_BOT_TOKEN. Our summary lists: Python 3; A credential in HTB_TOKEN; A credential in ANTHROPIC_API_KEY.
Does Hackthebox access the network?
SKILL.md names 1 domain. As links in the text: account.hackthebox.com. This is read from the text; nothing was executed.
Is Hackthebox safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Hackthebox use?
Hackthebox is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Hackthebox use?
About 697 tokens (SKILL.md is roughly 2.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Hackthebox?
Skills that share tags, products or a category with Hackthebox: Reverse Flow (lingbol088-spec/reverse-flow-skill, 940 stars), Ctf Osint (ljagiello/ctf-skills, 3.4k stars), Penetration Flow (lingbol088-spec/ReiPenFlow, 222 stars) and Helloctf Skill (ProbiusOfficial/Hello-CTF, 4.2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Hackthebox?
transilienceai (a GitHub organization) maintains it in transilienceai/communitytools, which has 562 GitHub stars. The repository holds 35 skills in this directory. The repository was last updated on July 29, 2026.
Source: transilienceai/communitytools on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.