nice-try-gpt
Harden CTF Challenges Against LLM Shortcuts
Challenge authors need to reduce shallow LLM pattern matching without making fair challenges frustrating. This skill reproduces the intended solve, selects a small resistance change, and verifies the result end to end.
Установить с помощью моего Агента
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Review the Skillstore skill "nice-try-gpt" from https://skillstore.io/skills/aleff-github-nice-try-gpt.md and its manifest at https://skillstore.io/api/skills/aleff-github-nice-try-gpt/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Ресурсы для AI-агентов
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Протестировать
Использование «nice-try-gpt». An authorized web challenge exposes an object identifier in a static response, making the intended authorization weakness immediately obvious.
Ожидаемый результат:
Shortcut identified: static object disclosure. Recommended move: reveal the identifier through ordinary runtime activity, adding one observation without changing the vulnerability.
Использование «nice-try-gpt». A proposed transformation adds a five-step state machine and requires an unrelated protocol.
Ожидаемый результат:
Rejected by the Human Cost Gate. It adds a new exploit primitive and materially increases player effort, so the original challenge should remain unchanged.
Использование «nice-try-gpt». The transformed challenge starts normally, preserves the weakness, removes the static cue, and passes an end-to-end solve.
Ожидаемый результат:
TRANSFORMED PASS. The report records the baseline, selected resistance, human-cost estimate, post-change difficulty, verification result, and changed files.
Аудит безопасности
БезопасноAll 17 static detections are false positives. The command detections match Markdown backticks and status labels, while the reconnaissance detections describe CTF review criteria rather than host discovery or system probing.
Факторы риска
⚙️ Внешние команды (12)
Поделиться и цитировать этот отчет
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
Копировать ссылку на отчёт
https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportЗначок Markdown
[](https://skillstore.io/skills/aleff-github-nice-try-gpt?utm_source=security_passport_badge)Значок HTML
<a href="https://skillstore.io/skills/aleff-github-nice-try-gpt?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/aleff-github-nice-try-gpt/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Встраиваемая карточка
<iframe src="https://skillstore.io/embed/skills/aleff-github-nice-try-gpt.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Академические ссылки (APA · BibTeX · CFF)
Цитата APA
aleff-github. (2026). nice-try-gpt security audit report (audit version 2) [Author version 0.2.0]. Skillstore. https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2Цитата BibTeX
@techreport{aleff-github-aleff-github-nice-try-gpt-2026,
author = {aleff-github},
title = {nice-try-gpt security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2},
note = {Author version 0.2.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nice-try-gpt security audit report (audit version 2)"
version: "0.2.0"
type: report
authors:
- name: "aleff-github"
date-released: "2026-09-20"
url: "https://skillstore.io/skills/aleff-github-nice-try-gpt/audits/2"
identifiers:
- type: other
value: "skillstore:aleff-github-nice-try-gpt:audit:2"
description: "Skillstore immutable audit report identifier"
Оценка Skillstore
Почему такая оценка Достоверность доказательств: СреднийЧто вы можете построить
Review a Training Challenge
Reproduce a lab solve, identify the fastest shallow shortcut, and propose a small change that preserves the lesson.
Validate a Challenge Update
Check that a transformed challenge still starts, exposes the intended weakness, and produces the expected result.
Improve LLM-Assisted Practice
Reduce obvious model shortcuts while keeping the expected human knowledge, actions, and difficulty band stable.
Попробуйте эти промпты
Review this authorized CTF challenge. Record its vulnerability class, intended solve path, required knowledge, difficulty band, and clean-start procedure. Do not modify files.
Using the verified baseline evidence, identify the single cheapest LLM shortcut. Explain which player-facing clue enables it and why the shortcut does not represent the intended learning objective.
Choose the smallest resistance move that reduces the identified shortcut. Check the same vulnerability class, learning objective, prerequisite knowledge, and human-cost gate before proposing the change.
Verify the transformed challenge from a clean state. Check startup, legitimate behavior, intended vulnerability, shortcut reduction, runtime success, flag isolation, and independent-solver status. Produce the required final report.
Лучшие практики
- Start with a clean, reproducible baseline before proposing any change.
- Prefer one evidence-based resistance move with one to three additional meaningful actions.
- Verify the intended solve, flag isolation, and normal application behavior after every change.
Избегать
- Do not hide flags behind randomness, unstable behavior, or undiscoverable values.
- Do not stack decoys, brute force, CAPTCHA, token flooding, or unrelated trivia.
- Do not claim LLM resistance without an isolated fresh-solver check or an explicit NOT TESTED result.
Часто задаваемые вопросы
Who should use this skill?
Does it create new vulnerabilities?
Can it test production systems?
How many changes should it make?
How does it verify success?
Does self-review prove model resistance?
Сведения для разработчиков
Автор
aleff-githubЛицензия
GPL-3.0-only
Версия автора
v0.2.0
Ревизия Skillstore
r2
Примечание о версии
Устанавливаемое содержимое изменилось, но автор не обновил заявленную версию.
Репозиторий
https://github.com/aleff-github/nicetrygpt/tree/f162c0e168b48a99f71224683eabbc8e63f38dcc/skills/nice-try-gptСсылка
9f1a7e8b681745b04f88358f3cf08da94782cac9
Актуальность поддержки
20.09.2026
Использование
0 загрузок · 0 просмотров
Структура файлов