nice-try-gpt
Harden CTF Challenges Against LLM Shortcuts
Challenge authors need to reduce shallow LLM pattern matching without making fair challenges frustrating. This skill reproduces the intended solve, selects a small resistance change, and verifies the result end to end.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Review the Skillstore skill "nice-try-gpt" from https://skillstore.io/skills/aleff-github-nice-try-gpt.md and its manifest at https://skillstore.io/api/skills/aleff-github-nice-try-gpt/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "nice-try-gpt". An authorized web challenge exposes an object identifier in a static response, making the intended authorization weakness immediately obvious.
Resultado esperado:
Shortcut identified: static object disclosure. Recommended move: reveal the identifier through ordinary runtime activity, adding one observation without changing the vulnerability.
Usando "nice-try-gpt". A proposed transformation adds a five-step state machine and requires an unrelated protocol.
Resultado esperado:
Rejected by the Human Cost Gate. It adds a new exploit primitive and materially increases player effort, so the original challenge should remain unchanged.
Usando "nice-try-gpt". The transformed challenge starts normally, preserves the weakness, removes the static cue, and passes an end-to-end solve.
Resultado esperado:
TRANSFORMED PASS. The report records the baseline, selected resistance, human-cost estimate, post-change difficulty, verification result, and changed files.
Auditoria de segurança
SeguroAll 17 static detections are false positives. The command detections match Markdown backticks and status labels, while the reconnaissance detections describe CTF review criteria rather than host discovery or system probing.
Fatores de risco
⚙️ Comandos externos (12)
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/aleff-github-nice-try-gpt?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/aleff-github-nice-try-gpt?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/aleff-github-nice-try-gpt/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/aleff-github-nice-try-gpt.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
aleff-github. (2026). nice-try-gpt security audit report (audit version 2) [Author version 0.2.0]. Skillstore. https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2Citação BibTeX
@techreport{aleff-github-aleff-github-nice-try-gpt-2026,
author = {aleff-github},
title = {nice-try-gpt security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2},
note = {Author version 0.2.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nice-try-gpt security audit report (audit version 2)"
version: "0.2.0"
type: report
authors:
- name: "aleff-github"
date-released: "2026-09-20"
url: "https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2"
identifiers:
- type: other
value: "skillstore:aleff-github-nice-try-gpt:audit:2"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: MédioO que você pode criar
Review a Training Challenge
Reproduce a lab solve, identify the fastest shallow shortcut, and propose a small change that preserves the lesson.
Validate a Challenge Update
Check that a transformed challenge still starts, exposes the intended weakness, and produces the expected result.
Improve LLM-Assisted Practice
Reduce obvious model shortcuts while keeping the expected human knowledge, actions, and difficulty band stable.
Teste estes prompts
Review this authorized CTF challenge. Record its vulnerability class, intended solve path, required knowledge, difficulty band, and clean-start procedure. Do not modify files.
Using the verified baseline evidence, identify the single cheapest LLM shortcut. Explain which player-facing clue enables it and why the shortcut does not represent the intended learning objective.
Choose the smallest resistance move that reduces the identified shortcut. Check the same vulnerability class, learning objective, prerequisite knowledge, and human-cost gate before proposing the change.
Verify the transformed challenge from a clean state. Check startup, legitimate behavior, intended vulnerability, shortcut reduction, runtime success, flag isolation, and independent-solver status. Produce the required final report.
Boas práticas
- Start with a clean, reproducible baseline before proposing any change.
- Prefer one evidence-based resistance move with one to three additional meaningful actions.
- Verify the intended solve, flag isolation, and normal application behavior after every change.
Evitar
- Do not hide flags behind randomness, unstable behavior, or undiscoverable values.
- Do not stack decoys, brute force, CAPTCHA, token flooding, or unrelated trivia.
- Do not claim LLM resistance without an isolated fresh-solver check or an explicit NOT TESTED result.
Perguntas frequentes
Who should use this skill?
Does it create new vulnerabilities?
Can it test production systems?
How many changes should it make?
How does it verify success?
Does self-review prove model resistance?
Detalhes do desenvolvedor
Autor
aleff-githubLicença
GPL-3.0-only
Versão do autor
v0.2.0
Revisão da Skillstore
r2
Aviso de versão
O conteúdo instalável mudou, mas o autor não atualizou a versão declarada.
Repositório
https://github.com/aleff-github/nicetrygpt/tree/f162c0e168b48a99f71224683eabbc8e63f38dcc/skills/nice-try-gptReferência
9f1a7e8b681745b04f88358f3cf08da94782cac9
Atualidade da manutenção
20/09/2026
Uso
0 downloads · 0 visualizações
Estrutura de arquivos