2 skills-with-secrets challenges

[commjoen]

Context

• What should the challenge scenario be like?
  We see more and more claude secerets distributed with hardcoded secrets. I want to have a challenge in which a claude skill (Zip) (1 challenge) and a cursor skill markdown file (another challenge) are present with the secret inside. The user has to go through the files and extract the secret as the answer.
  The implementation should retrieve the secret from the file: it should not be hardcoded in java.
  the skill files should be present in the resource folder, and possibly be hosted/routed through the backend as well from that folder.
• What should the participant learn from completing the challenge?
  STOP CREATING SKILLS WITH CREDENTIALS OR SECERETS INSIDE!!!! GRRRRR
• For what category would the challenge be? (e.g. Docker, K8s, binary)
  AI

Did you encounter this in real life? Could you tell us more about the scenario?

YEs, too many times not to have a challenge for this.

• Challenge (Simple): have a secret in a cursor skill.md file
• Challenge (harder): have a secret in a claude skill file.

[kekubhai]

I’d like to take this issue.

I’ll add the Cursor and Claude skill-based challenges, keep the secrets in the respective resource files rather than hardcoding them, and add the required challenge configuration and tests. I’ll also follow the existing challenge patterns in the repository.

[commjoen]

Hi @kekubhai , let's do one at the time :) .this issue is yours :)

[kekubhai]

Sure , apologies for my over enthusiasm . I'll get on working on this one first