Guide · Agent skill
How to use the Competition Identity Windows agent skill
Updated · written with AI from the project's own documentation and checked against our catalogue data
competition-identity-windows is an agent skill, a set of instructions that an AI agent loads when it works on a specific kind of task. This one is for capture-the-flag style challenges about identity and Windows environments, such as Active Directory, Kerberos tickets, OAuth tokens, Windows host artifacts and suspicious mailbox rules. This guide explains what the skill changes about the agent's behaviour, how to install it, how to trigger it, and what to watch for.
Competition Identity Windowszhaoxuya520/reverse-skill · MIT Download the skill Quick start
- 1Install the parent skill. Install and activate ctf-sandbox-orchestrator first, since this skill says it must only be used after the parent has set the sandbox assumptions.
- 2Download the ZIP. Download the competition-identity-windows ZIP file from this page.
- 3Unzip into a skills folder. Unzip the folder into ~/.claude/skills/ for all projects, or into a project's .claude/skills/ folder for one project.
- 4Or upload it in the Claude apps. If you use the Claude apps, open Settings, go to Capabilities, then Skills, and upload the skill.
- 5Start your challenge with the parent. Establish the sandbox assumptions, node ownership and evidence priorities with ctf-sandbox-orchestrator.
- 6Ask a specific question. Describe the identity, ticket, token, host or mailbox task in plain language so the agent can match it to this skill.
What the skill makes the agent do
The skill gives the agent a structured method for identity and lateral-movement challenges. It starts by mapping the identity or pivot chain before going through every host artifact. It also tells the agent to keep credential possession separate from the privilege that credential is accepted for, and to line up identity, host and mail evidence on one timeline.
The skill is a downstream specialist. Its own text says it should only be used after the parent skill ctf-sandbox-orchestrator is already active and has set the sandbox assumptions, node ownership and evidence priorities. If that has not happened, the agent is told to return to the parent first.
- Map the identity or pivot chain first.
- Separate credential possession from accepted privilege.
- Correlate identity, host and mail evidence on one timeline.
- Keep tickets, SIDs, event IDs, mailbox rules and pivot hosts in compact evidence blocks.
- Reproduce the privilege edge or mail effect from the smallest viable chain.
- Reply in Simplified Chinese unless the user explicitly asks for English.
Install the competition-identity-windows skill
Download the ZIP file from this page and unzip it. You can install the skill in one of two ways, depending on how you use your agent.
For Claude Code, place the unzipped folder in your user skills directory at ~/.claude/skills/, or in a project's .claude/skills/ folder if you want the skill available only inside that project.
For the Claude apps, open Settings, go to Capabilities, then Skills, and upload the skill there.
- Option A: unzip into ~/.claude/skills/ for all your projects.
- Option B: unzip into a project's .claude/skills/ folder for one project only.
- Option C: upload the skill in the Claude apps under Settings → Capabilities → Skills.
Install the parent skill it depends on
This skill will not do its job alone. The skill files say it requires the parent skill ctf-sandbox-orchestrator to be installed and active. Install and activate the parent before you start a challenge that uses this skill.
The main skill file also names several more specific sibling skills, such as competition-windows-pivot. The files do not confirm that those siblings are present in your setup, so check them yourself if you rely on them.
- Required: ctf-sandbox-orchestrator installed and active.
- Named but not confirmed: sibling skills such as competition-windows-pivot.
How to trigger the skill with natural requests
You do not need a special command. The skill describes when it should apply, so ask for the task in plain language after the parent skill is active. Requests that match the skill's description include asking the agent to trace tickets or tokens, inspect mailbox rules, analyze Windows host evidence, understand an Active Directory trust path, or explain a lateral-movement chain across sandbox-linked nodes.
The skill also points to narrower sibling skills for specific topics. If your question is only about one area, such as constrained delegation or AD CS certificate templates, the agent is directed to a more specific skill for that topic.
- 'Trace the Kerberos ticket path for this challenge and tell me which service accepts it.'
- 'Look at these mailbox rules and explain how the forwarding could be used.'
- 'Analyze these Windows host artifacts and build one timeline with the event IDs.'
- 'Explain the AD trust path from this user to the target group.'
- 'Walk me through the lateral-movement chain across the sandbox nodes.'
What the skill needs and how it behaves
According to the skill's own assessment, it runs no scripts and makes no network calls. It is a set of written instructions and a checklist. The agent's output follows the skill's rules: compact evidence blocks, raw artifacts kept separate from parsed summaries, and exact host-to-host pivot order.
Because the content covers credential replay and attack chains, use it only in sandboxed challenges or authorised lab work. Its own description says it is not meant for real or production enterprise networks.
- Runs scripts: no.
- Uses network: no.
- Licence: MIT.
- Keep raw artifacts, parsed summaries and derived timelines as separate outputs.
What people use it for
- Tracing a Kerberos ticket from its minting point to the service that accepts it in a CTF challenge.
- Reviewing suspicious mailbox forwarding or delegate-access rules in a sandboxed mail scenario.
- Building one timeline that combines Windows event logs, sign-in events and mailbox changes.
- Explaining an Active Directory trust or group path that a lab challenge depends on.
- Documenting a lateral-movement chain with the exact host-to-host pivot order and the service that accepts each credential.
Frequently asked questions
What is the competition-identity-windows skill?
It is an agent skill, a set of written instructions that changes how an AI agent approaches identity and Windows challenges. It covers Active Directory, Kerberos, LDAP, OAuth, enterprise messaging and Windows host forensics in sandboxed capture-the-flag work.
How do I install competition-identity-windows?
Download the ZIP from this page and unzip it into ~/.claude/skills/ or a project's .claude/skills/ folder. In the Claude apps, you can instead upload it under Settings → Capabilities → Skills.
Does competition-identity-windows require another skill?
Yes. The skill says the parent skill ctf-sandbox-orchestrator must be installed and active first, and the agent should return to that parent if the sandbox assumptions have not been set.
Is competition-identity-windows free to use?
The skill is published under the MIT licence, as listed on this page. Check the licence file in the repository for the full terms.
Does the skill run scripts or access the network?
According to the skill's assessment, it runs no scripts and makes no network calls. It consists of instructions and reference checklists.
Why does the agent reply in Chinese?
The skill's instructions tell the agent to reply in Simplified Chinese unless the user explicitly asks for English. Ask for English in your request if you want English output.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
Use this skill if you are working on sandboxed CTF or lab challenges about Active Directory, Kerberos, OAuth or mailbox abuse, and you already use ctf-sandbox-orchestrator. Pick something else for production or real enterprise networks, for general identity administration, or if you have not set up the parent skill.
Download the skill