What is solve-challenge?

A starting workflow for solving an unfamiliar capture-the-flag challenge. It performs initial sorting, identifies the likely challenge category, and sends the work to a more specialized CTF guide.

Use it to triage challenge bundles, suspicious files, remote services, and unclear descriptions, detect common CTFd platforms, and route web, malware, cryptography, or other work to the appropriate solving process.

It helps decide where to begin when the challenge description is vague or the supplied files and service could fit several categories. This avoids applying a detailed technique before understanding the target.

solve-challenge — Skill for Claude Code by SeaOf0

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/SeaOf0/dsh-redteam-model

agentmods

npx agentmods add skills/seaof0/dsh-redteam-model/solve-challenge

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/seaof0/dsh-redteam-model/solve-challenge/github.svg)](https://agentmods.dev/skills/seaof0/dsh-redteam-model/solve-challenge)

Your own site

<a href="https://agentmods.dev/skills/seaof0/dsh-redteam-model/solve-challenge"><img src="https://agentmods.dev/badge/skills/seaof0/dsh-redteam-model/solve-challenge/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/seaof0/dsh-redteam-model/solve-challenge"><img src="https://agentmods.dev/badge/skills/seaof0/dsh-redteam-model/solve-challenge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 102 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,258 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin 97% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00102	$0.02258
Opus 5	$0.00051	$0.01129
Sonnet 5	$0.00020	$0.00452
Haiku 4.5	$0.00010	$0.00226

Measured 9d ago against content hash 9939e2a3149e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

solve-challenge scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s "$CTF_URL/api/v1/" | head -5

Origin

This is a copy

97% identical to solve-challenge — 2 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

modes/ctf-solver/refs/solve-challenge/SKILL.md · 193 lines

How it starts

The opening of the file, as written. The whole thing — 193 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CTF Challenge Solver

You're a skilled CTF player. Your goal is to solve the challenge and find the flag.

Environment Setup

Two setup strategies depending on your workflow:

Pre-install (recommended before competitions)

本部署注：本仓库不随附 scripts/ 安装脚本（下述命令与链接仅作参考清单）；工具缺装走三级兜底提示，绝不自动安装。

Use the central installer entrypoint:

bash scripts/install_ctf_tools.sh all

Run a narrower mode when you only want one tool group:

bash scripts/install_ctf_tools.sh python
bash scripts/install_ctf_tools.sh apt
bash scripts/install_ctf_tools.sh brew
bash scripts/install_ctf_tools.sh gems
bash scripts/install_ctf_tools.sh go
bash scripts/install_ctf_tools.sh manual

The full package lists now live in scripts/install_ctf_tools.sh.

On-demand (during challenges)

Each category skill's SKILL.md has a Prerequisites section listing only the tools needed for that category. Install as you go.

Workflow

Step 0: CTFd Platform Detection

If the CTF platform URL is known, check if it runs CTFd and switch to API-driven navigation:

# Detect CTFd (look for /api/v1/ and /themes/core/)
curl -s "$CTF_URL/api/v1/" | head -5
curl -s "$CTF_URL" | grep -oE '/themes/core/'

If CTFd is detected, ask the user for their API token (generated from CTFd Settings > Access Tokens). The token is not provided by default — the user must create one in the CTFd web UI first. Once provided, set the environment variables and proceed via API:

export CTF_URL="https://ctf.example.com"
export CTF_TOKEN="ctfd_..."  # Ask user for this

Invoke /ctf-misc and load its ctfd-navigation.md for the full API reference and Python client class.

Step 1: Recon

Explore files -- List the challenge directory, run file * on everything
Triage binaries -- strings, xxd | head, binwalk, checksec on binaries
Fetch links -- If the challenge mentions URLs, fetch them FIRST for context
Connect -- Try remote services (nc) to understand what they expect
Read hints -- Challenge descriptions, filenames, and comments often contain clues

Read the full file on GitHub · 193 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

9d ago First seen · 193 lines · 102 tokens per session scan A 9939e2a3149e

Subscribe to this mod's changes

solve-challenge is a skill published in the GitHub repository SeaOf0/dsh-redteam-model (325 stars, last pushed 4d ago), licensed MIT. It adds 102 tokens to every session and 2,258 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). It is 97% identical to solve-challenge, differing in 2 lines, and is treated as a copy.

Security dsh-plugin

dsh-sdk-upgrade

Safely select and install a compatible official @deepseek-ai SDK release for dsh plugin projects (dsh-web, dsh-trading, and similar monorepos) from npm using an isolated worktree, explicit cohort review, CI-equivalent validation, and controlled rollout — including syncing the project's declared DSH host-version floor…

zhu1090093659/dsh-web · 176 tokens

dsh-web-sdk-compatibility

Adapt and repair dsh-web after an approved official @deepseek-ai SDK/runtime cohort is selected or installed. Compare public API, type, service-injection, module-table, protocol, and behavior changes; map every change to repository consumers; implement the smallest fixes and durable compatibility contracts; handle…

zhu1090093659/dsh-web · 107 tokens

ov-experience-memory

Retrieve and apply OpenViking Experience memories through the Agent runtime's generic OpenViking search and read tools. Use before or during executable, multi-step, or tool-based work such as coding, file or data changes, configuration, deployment, workflow execution, and failure recovery when prior operational…

volcengine/OpenViking · 78 tokens

solve-challenge