When you hit an AI/ML challenge in a CTF and need to extract flags from neural networks, break LLM guardrails, or craft adversarial examples, this gives you the playbook. It covers model weight manipulation (negating fine-tuning deltas, merging LoRA adapters), classic attacks like FGSM and PGD, prompt injection techniques, membership inference, and model extraction via API queries. The quick start commands are genuinely useful for inspecting PyTorch checkpoints, safetensors files, and HuggingFace models. Honestly, the referenced markdown files do the heavy lifting here, but the triage section helpfully tells you when to pivot to crypto or reverse engineering skills instead.

skills.sh installs
8.3K
GitHub stars
3.7K
last updated
Aug 21, 2026

Install

$ npx -y skills add ljagiello/ctf-skills --skill ctf-ai-ml --agent claude-code

Installs into .claude/skills of the current project.

Files

CTF AI/ML

Quick reference for AI/ML CTF challenges. Each technique has a one-liner here; see supporting files for full details.

Prerequisites

Python packages (all platforms):

pip install torch transformers numpy scipy Pillow safetensors scikit-learn

Linux (apt):

apt install python3-dev

macOS (Homebrew):

brew install python@3

Additional Resources

  • model-attacks.md - Model weight perturbation negation, model inversion via gradient descent, neural network encoder collision, LoRA adapter weight merging, model extraction via query API, membership inference attack
  • adversarial-ml.md - Adversarial example generation (FGSM, PGD, C&W), adversarial patch generation, evasion attacks on ML classifiers, data poisoning, backdoor detection in neural networks
  • llm-attacks.md - Prompt injection (direct/indirect), LLM jailbreaking, token smuggling, context window manipulation, tool use exploitation

When to Pivot

Sponsors

Details

Repository
github.com/ljagiello/ctf-skills
Categories
Security, AI & Agent Building, Data Science & ML
First seen
Apr 16, 2026

More from ljagiello/ctf-skills

All 11

Recommended

More Security
1resend avataremail-best-practicesresend/email-best-practicesUse when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring compli8.2Kskills.sh installs
2billionsnetwork avatarverified-agent-identitybillionsnetwork/verified-agent-identityDecentralized identity for agents with Ethereum-based DIDs and x402 payment authentication.8.2Kskills.sh installs
3agricidaniel avatarseo-technicalagricidaniel/claude-seoTechnical SEO audit across 9 categories: crawlability, indexability, security, URL structure, mobile, Core Web Vitals, structured data, JavaScript rendering, an8Kskills.sh installs
4google avataragent-platform-alert-configurationgoogle/skillsConfigures best-practice alerting policies for AI agents using OpenTelemetry (OTel) metrics. Use when analyzing, writing, or deploying alerting policies to moni7.8Kskills.sh installs
5trailofbits avatarsecure-workflow-guidetrailofbits/skillsGuides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration)7.8Kskills.sh installs
6google avatargke-upgradesgoogle/skillsPlans, executes, and validates Google Kubernetes Engine (GKE) cluster upgrades and maintenance operations for both Standard and Autopilot clusters. Produces upg7.6Kskills.sh installs