Skip to content
Get packs

Competition Template Render Path

Traces SSR route rendering and template-vs-handler gating for CTF sandbox analysis

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
3 files

What it does

This is a specialist instruction set for an AI agent working on capture-the-flag style security exercises in a sandbox. Once installed, the agent follows a structured method for tracing how a server-rendered web page is built: which route matches, what data a loader supplies to the template, what ends up in the HTML or hydration data sent to the browser, and whether template-level checks match the backend's own enforcement. It is meant to run only after a parent skill, ctf-sandbox-orchestrator, has set up sandbox assumptions, and it tells the agent to reply in Simplified Chinese by default.

Great for

  • Students or competitors working on web security CTF challenges involving SSR or hydration
  • Security practitioners reviewing whether a template hides data that the backend still exposes
  • Users already working within the ctf-sandbox-orchestrator workflow

Skip it if

  • Testing live production systems or third-party sites without authorization, since the skill is written for sandboxed competition targets
  • Users without the parent ctf-sandbox-orchestrator skill, since the skill tells the agent to return to that parent first and is not standalone
  • Bundle recovery or source map reconstruction tasks, which the skill itself says to hand off to a different skill

Try asking

  • “Trace the render chain for the /preview route in this sandbox and show where the preview flag is checked”
  • “Compare the template gating on the admin page with the backend handler and report any mismatch”
  • “Find what data the hydration payload exposes for the product detail route”
  • “Explain which request-to-render branch leads to the hidden tenant content”
Step-by-step guide: how to use Competition Template Render PathInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    competition-template-render-path.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip competition-template-render-path.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip competition-template-render-path.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Set up the ctf-sandbox-orchestrator skill first, since this one will direct the agent back to it otherwise
  • Point the agent only at sandboxed or authorised targets and state the scope explicitly
  • Ask for the answer in English if you do not want the default Simplified Chinese output

What's inside

  • agents/openai.yaml
  • references/template-render-path.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.