Individual skill
rust-reverse-engineering
Use when analyzing a Rust binary without source code, reverse engineering Rust executables or libraries, demangling Rust symbols, recovering likely crate namespaces, tracing panic or unwind paths, identifying FFI boundaries, or mapping behavior from ELF, Mach-O, PE, `.so`, `.dylib`, `.dll`, `.a`, `.rlib`, or object files.
plugins/jingjing2222/rust-reverse-engineering-skill/skills/rust-reverse-engineering/SKILL.md
Source commit d780783eba4ecc7c8b9429f95c9362df95f07c61
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,532
- Repository last updated
- Nov 6, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-coding Repository topic
- awesome Repository topic
- awesome-list Repository topic
- codex Repository topic
- codex-plugins Repository topic
- openai Repository topic
- codex-skill Repository topic
- codex-skills Repository topic
- marketplace Repository topic
- codex-marketplace Repository topic
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesSKILL.mdcore · 15,039 bytesagents/openai.yamlasset · 232 bytesreferences/dynamic-analysis-notes.mddoc · 887 bytesreferences/rust-patterns.mddoc · 1,734 bytesreferences/setup-guide.mddoc · 2,032 bytesreferences/static-analysis-workflow.mddoc · 1,001 bytesreferences/triage-and-fingerprinting.mddoc · 1,576 bytesscripts/check-deps.shruns · 1,459 bytesscripts/collect-artifacts.shruns · 14,912 bytesscripts/demangle-symbols.shruns · 1,024 bytesscripts/export-ghidra-pseudocode.shruns · 13,369 bytesscripts/find-rust-patterns.shruns · 3,693 bytesscripts/ghidra-job.shruns · 9,795 bytesscripts/ghidra/ExportRustPseudocode.javaasset · 14,780 bytesscripts/install-dep.shruns · 9,471 bytesscripts/macho-slice.shruns · 3,694 bytesscripts/triage.shruns · 6,101 bytes
Read excerpt
# Rust Reverse Engineering
Reverse engineer Rust-compiled binaries methodically. Start with fast triage, confirm that the target is actually Rust, recover namespaces and runtime clues, then move into static or dynamic analysis with a clear hypothesis.
Do **not** jump straight into decompiler output and treat it as source truth. Rust binaries often contain compiler-generated glue, monomorphized generic code, panic paths, and async state machines that will drown the signal if you skip the triage stage.
## When to Use
Use this skill when the user wants to:
- analyze a Rust executable, shared library, static archive, `.rlib`, or object file
- confirm whether a binary was built from Rust
- demangle Rust symbols and recover likely crate namespaces
- trace entry points, panic/unwind paths, FFI exports/imports, or async executors