Skip to content
Get packs

Container Escape Analysis (CTF)

Guides an agent to analyze and verify container-to-host escape paths in CTF sandbox challenges.

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
3 files

What it does

This is a specialist instruction set for an AI agent working on capture-the-flag (CTF) security challenges. Once installed, the agent follows a structured checklist to map how a container is isolated (namespaces, cgroups, capabilities, seccomp, mounts), work out which kernel or runtime weakness could let code step outside that container, and prove with before-and-after evidence whether the boundary was actually crossed. It is meant to run only after a parent skill, ctf-sandbox-orchestrator, has set up the sandbox context, and it replies in Simplified Chinese by default.

Great for

  • CTF players or competition teams working on container isolation challenges
  • Security students learning how namespaces, cgroups and capabilities limit containers
  • Reviewers who need a documented method for proving whether an escape primitive crosses a sandbox boundary

Skip it if

  • Attacking systems you do not own or have no written authorisation to test, since the skill is built to demonstrate escapes and gives no legal or scope checks of its own
  • Production hosts or shared infrastructure, because the workflow includes instrumented exploit trials that could crash or compromise them
  • Use without the parent ctf-sandbox-orchestrator skill, which the skill says must be active first

Try asking

  • “Analyze whether the capabilities and mounts in this challenge container could allow a path to the host”
  • “Check the kernel version and seccomp profile to judge if a known primitive is plausible here”
  • “Produce a minimal reproducible chain from container context to a host-level effect for the write-up”
Step-by-step guide: how to use Container Escape Analysis (CTF)Install, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    competition-kernel-container-escape.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip competition-kernel-container-escape.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip competition-kernel-container-escape.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it inside an isolated CTF lab you control, and keep a clear record of the scope you were given
  • Keep instrumented test runs separate from the pristine challenge environment, as the skill itself recommends
  • Provide the kernel version and runtime details up front so the agent can narrow the analysis

What's inside

  • agents/openai.yaml
  • references/kernel-container-escape.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.