Back to Details

ctf-sandbox

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

CTF sandbox entry (sidecar, not a second router)

CTF sandbox entry (sidecar, not a second router)

ACTION REQUIRED（读完后立刻执行）

ACTION REQUIRED (Execute immediately after reading)

NOW

: 跑

../scripts/case-init.ps1

；

auth.status=granted

前禁止对真实外网 ACT。竞赛/靶场用

-NetworkProfile lab

或

offline

。

NOW

: 打开包根下的

../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md

，按它的 sandbox 假设继续。

```
MUST NOT
```
把 40+ 个
```
competition-*
```
子技能写进
```
routing.json
```
。本入口只是一条 PRIMARY 门闩。
```
ACT
```
: 由 orchestrator 选一个 downstream
```
competition-*
```
。具体题型已明确时（pwn/ROP、APK、IDA）应已由
```
routing.json
```
更靠前的规则赢下，不要再抢。

```
NOW
```
: Run
```
../scripts/case-init.ps1
```
; DO NOT perform any actions on the real external network until
```
auth.status=granted
```
. Use
```
-NetworkProfile lab
```
or
```
offline
```
for competitions/security labs.
```
NOW
```
: Open
```
../../CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/SKILL.md
```
in the package root directory, and proceed according to its sandbox assumptions.
```
MUST NOT
```
: Add over 40
```
competition-*
```
sub-skills to
```
routing.json
```
. This entry is only a PRIMARY latch.
```
ACT
```
: Let the orchestrator select a downstream
```
competition-*
```
sub-skill. When the specific question type is clear (pwn/ROP, APK, IDA), it should have been handled by a higher-priority rule in
```
routing.json
```
, so do not take over.

为什么单独一层

Why a separate layer

CTF-Sandbox-Orchestrator/

是 GPL 旁路包，授权默认是沙箱内部。核心路由包仍是 MIT +

scope.md

门禁。本 skill 只做关键词入口，不把竞赛树并进核心。

CTF-Sandbox-Orchestrator/

is a GPL sidecar package, with authorization limited to the sandbox by default. The core routing package remains under MIT license +

scope.md

access control. This skill only serves as a keyword entry point and does not integrate the competition skill tree into the core.

任务完成自检（声称完成前 MUST 通过）

Task Completion Self-Check (Must pass before claiming completion)

我是否先走了 case-init / scope，而不是把“用户说了 CTF”当成已授权外网？
我是否打开了 sidecar orchestrator，而不是把 40 个子技能当 PRIMARY？
若任务其实是 pwn/APK/IDA，我是否让更具体的 PRIMARY 接手？

Did I first run case-init / scope verification instead of treating "user mentioned CTF" as authorization for external network access?
Did I open the sidecar orchestrator instead of treating the 40 sub-skills as PRIMARY?
If the task is actually pwn/APK/IDA, did I let the more specific PRIMARY take over?