Security
Plugin
reverse-skill
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端
Plugin Signal92/100Strong
maintained94
capable80
documented100
adopted98
Install
$ npx -y skills add zhaoxuya520/reverse-skill --agent claude-code
Stats
39,460
Stars
5,492
Forks
Active
Maintenance
PowerShell
Language
MIT
License
11d ago
Last commit
4mo ago
Created
1m ago
Added
Repo: zhaoxuya520/reverse-skill
In this plugin
- reverse-skill-router
- api-security
- apk-reverse
- attack-chain
- binary-diff
- binary-ninja-reverse
- browser-automation
- browser-extension-reverse
- case-review
- cloud-k8s
- code-audit
- ctf-sandbox
- database-security
- diagram-generator
- digital-forensics
- docs-generator
- dotnet-reverse
- edr-bypass-re
- email-security
- firmware-pentest
- ghidra-reverse
- go-rust-reverse
- hardware-security
- ida-reverse
- identity-federation
- js-reverse
- llm-security
- macos-reverse
- malware-analysis
- mobile-reverse
- ot-ics
- patch-diff-exploit
- pentest-tools
- src-hunter
- protocol-reverse
- pwn-chain
- radare2
- radio-sdr
- reverse-engineering
- dsl-vm-reverse
- supply-chain-security
- thick-client
- threat-hunting
- threat-intelligence
- wifi-wireless
- windows-ad
What's inside
Skill(46 skills)
/reverse-skill-routerUse the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path./api-securityUse for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD testing./apk-reverse在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。
- /attack-chain
- /binary-diff
- /binary-ninja-reverse
- /browser-automation
- /browser-extension-reverse
- /case-review
- /cloud-k8s
- /code-audit
- /ctf-sandbox
- /database-security
- /diagram-generator
- /digital-forensics
- /docs-generator
- /dotnet-reverse
- /edr-bypass-re
- /email-security
- /firmware-pentest
- /ghidra-reverse
- /go-rust-reverse
- /hardware-security
- /ida-reverse
- /identity-federation
- /js-reverse
- /llm-security
- /macos-reverse
- /malware-analysis
- /mobile-reverse
- /ot-ics
- /patch-diff-exploit
- /pentest-tools
- /src-hunter
- /protocol-reverse
- /pwn-chain
- /radare2
- /radio-sdr
- /reverse-engineering
- /dsl-vm-reverse
- /supply-chain-security
- /thick-client
- /threat-hunting
- /threat-intelligence
- /wifi-wireless
- /windows-ad
README
About
If you are an AI Agent, jump to README_AI.md and follow the instructions strictly.
When an AI agent (Claude Code, Codex, Cursor, OpenCode, or another compatible client) encounters an APK, a binary, frontend JS encryption, a CTF challenge, or a pentesting target, this package routes it to the right methodology, checks available tools, and executes a repeatable workflow instead of guessing commands.
User task
→ RULES.md
→ MASTER-ROUTING / master-route.ps1 (PRIMARY)
→ case-init / scope.md (auth + network_profile; no target ACT until ready)
→ Scenario skill → tools / MCP / scripts
→ timeline + Evidence→Finding→Path → report + field-journal
Why this exists:
- AI agents don't know whether to use jadx, apktool, Frida, IDA, or BurpSuite for a given task
- APK, ELF, JS, PCAP, and CTF tasks each need different playbooks
- Tools, MCP servers, and scripts are scattered across machines
- The same mistakes get repeated because experience isn't reused
Current status
| Routing rules | Regression benchmark | Core skill modules | CI platforms | Client model |
|---|---|---|---|---|
| 44 (R0–R45) | 175 cases | 45 tracked modules | Windows + Ubuntu | Client-neutral |
The routing core is driven by one structured configuration, validated by cross-platform CI, and kept separate from optional client adapters.
PRIMARY ladder: skills/MASTER-ROUTING.md · Full matrix: skills/routing.md · Ops: skills/ops/
Sponsors
Built With
Getting Started
Prerequisites
- Java / JDK — for jadx and apktool
- Node.js 22.12+ — for JS toolchain and MCP servers
- Python 3.x — for Frida and helper scripts
- A code AI client — Claude Code, Codex, Cursor, OpenCode, or another compatible client
Installation
git clone https://github.com/zhaoxuya520/reverse-skill.git
Then refresh the tool index per platform:
| Platform | Command |
|---|---|
| Windows | powershell -File skills/scripts/refresh-tool-index.ps1 |
| Linux / macOS | bash skills/scripts/refresh-tool-index.sh |
| Kali Linux | bash kali/scripts/refresh-tool-index.sh |
Check skills/tool-index.md to see detected tools.
Platform-specific docs:
- Kali Linux → kali/README-kali.md
- Ubuntu/Debian → docs/platforms/linux.md
- macOS → docs/platforms/macos.md
Usage
Supported scenarios
| Scenario | Entry |
|---|---|
| APK / Android analysis | skills/apk-reverse/ |
| iOS / mobile | skills/mobile-reverse/ |
| Binary reverse (exe/dll/so/elf) | skills/ida-reverse/ / skills/radare2/ |
| Binary Ninja / HLIL / MLIL / MCP | skills/binary-ninja-reverse/ |
| .NET / C# | skills/dotnet-reverse/ |
| Frontend JS / encrypted params | skills/js-reverse/ |
| DSL VM / custom JS opcode VM | skills/reverse-engineering/dsl-vm-reverse/ |
| HTTP capture / request replay | anything-analyzer, Reqable MCP + js-reverse/ |
| Malware / YARA | skills/malware-analysis/ |
| Penetration testing / scanning | skills/pentest-tools/ |
| Attack chain / red-team orchestration | skills/attack-chain/ |
| Case evidence review / report handoff | skills/case-review/ |
| CTF competition | CTF-Sandbox-Orchestrator/ (42 sub-skills) |
| Firmware / IoT | skills/firmware-pentest/ |
| Patch diff / N-day | skills/patch-diff-exploit/ |
| Pwn / exploit development | skills/pwn-chain/ |
| EDR bypass | skills/edr-bypass-re/ |
| API / GraphQL | skills/api-security/ |
| Supply chain / SBOM | skills/supply-chain-security/ |
| LLM / AI security | skills/llm-security/ |
| OLLVM deobfuscation | skills/reverse-engineering/references/ollvm-deobfuscation.md |
| Diagrams / reports | skills/diagram-generator/ / skills/docs-generator/ |
Key files
| File | Purpose |
|---|---|
| README_AI.md | AI agent bootstrap and configuration |
| RULES.md | Global routing rules (scope gate before ACT) |
| skills/MASTER-ROUTING.md | PRIMARY fast ladder |
| skills/routing.md | Task → skill routing matrix |
| skills/SKILL.md | Master entry point |
| skills/INDEX.md | Auto-generated, client-neutral skill navigation index |
| skills/config/routing.json | Routing single source of truth (43 rules, R0–R44) |
| skills/tool-index.md | Local tool status (auto-generated) |
| skills/scripts/master-route.ps1 | One-shot PRIMARY triage (reads routing.json) |
| skills/scripts/case-init.ps1 | Case dir: scope / timeline / workitems |
| skills/case-review/ | Read-only Evidence graph review and artifact fixity checks |
| skills/scripts/test-routing.ps1 | Routing regression runner (173 benchmark cases) |
| skills/scripts/verify-routing-coherence.ps1 | Structure + supply-chain pin gate checks |
| skills/scripts/extract-summaries.ps1 | Regenerates INDEX.md from skill frontmatter |
| AGENTS.md | Platform-neutral repository instructions |
| skills/ops/ | Scope, Evidence chain, roles, timeline (skill-router form) |
Testing (run after any routing/config change)
# 1. Routing regression — 173 (hint → expected PRIMARY) cases, fails CI on any mismatch
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1
# 2. Structure coherence + supply-chain pin gate (unpinned auto-install fails)
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/verify-routing-coherence.ps1
# 3. Smoke: verify + script parse + quick route matrix
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/smoke.ps1
# 4. INDEX.md drift check (regenerate with extract-summaries.ps1 if dirty)
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/extract-summaries.ps1 -Check
GitHub Actions CI runs all of the above on Windows + Ubuntu for every push/PR.
Client-neutral integration
File tree
FAQ
reverse-skill is a Claude Code plugin with 46 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes reverse-skill-router, api-security, apk-reverse. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
- What is reverse-skill?
- Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端
- How do I install reverse-skill?
- Run these in Claude Code: npx -y skills add zhaoxuya520/reverse-skill --agent claude-code. Then prompt normally.
- Does reverse-skill auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.
- Is reverse-skill free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it