ctf-cloud

Files (2)

• SKILL.md
• openai.yaml · agents/

SKILL.md (first lines)

# CTF Cloud

## Workflow

1. Identify cloud surface: URLs, buckets, metadata endpoints, container files, kube configs, tokens, IAM hints, and CI variables.
2. Inspect local artifacts before remote actions: Dockerfiles, compose files, manifests, policies, environment references, and build logs.
3. For network targets, use bounded requests and avoid destructive operations.
4. Validate permissions with read-only checks first: list, get, describe, or metadata fetch when safe.
5. Trace privilege paths only from evidence: role assumption, token audience, bucket policy, service account, or mounted secret.

## Evidence Rules

Record endpoint, credential source, permission result, object path, policy snippet, and returned data. Never print or commit live credentials.

## Output

Return cloud surface map, read-only evidence, candidate flags, risk notes, and next actions for missing provider-specific tooling.

From OneSword-AI/CyberAgent, MIT.

More from OneSword-AI/CyberAgent