Individual skill
reverse-skill-router
Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.
skills/SKILL.md
Source commit cab634bd855fc287f6e420c1f36fd1a6b9245960
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 44,410
- Repository last updated
- Sep 22, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
- security Derived category
- testing Derived category
- docs Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
CONTRIBUTING.mddoc · 20,884 bytesINDEX.mddoc · 11,509 bytesMASTER-ROUTING.mddoc · 7,435 bytesSKILL.mdcore · 13,245 bytesSKILL.mdcore · 13,245 bytesSKILL.mdcore · 13,245 bytesSKILL.mdcore · 13,245 bytesSKILL.mdcore · 13,245 bytesSKILL.mdcore · 13,245 bytesconfig/routing.jsonasset · 15,089 bytesfield-journal/2026-05-15-cellular-pro-mumu-ksad-fragment-fix.mddoc · 1,296 bytesfield-journal/2026-05-15_lumine-go-reverse.mddoc · 2,261 bytesfield-journal/2026-05-16_pentest-personalblog-fun-mass-assignment.mddoc · 5,226 bytesfield-journal/2026-05-17_pentest-vue-spa-actuator-leak.mddoc · 3,073 bytesfield-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.mddoc · 12,308 bytesfield-journal/2026-05-26_pentest-newapi-rate-limit-bypass.mddoc · 2,962 bytesfield-journal/2026-06-29_burp-mcp-full-test-and-fix.mddoc · 7,592 bytesfield-journal/2026-07-05_dsl-vm-captcha-reverse.mddoc · 3,569 bytesfield-journal/2026-07-14_android-arm64-self-extract-source-recovery.mddoc · 5,797 bytesfield-journal/2026-07-18_gin-juice-client-friction.mddoc · 1,656 bytesfield-journal/2026-07-20_reverse-toolchain-windows-bootstrap.mddoc · 4,002 bytesfield-journal/2026-07-22_electron-bytenode-privileged-update-chain.mddoc · 6,824 bytesfield-journal/2026-08-01_nextjs-cdk-contract-faithful-local-reconstruction.mddoc · 7,809 bytesfield-journal/2026-08-01_pentest-encryption-oracle-public-template-sql-admin-takeover.mddoc · 8,251 bytesfield-journal/2026-08-06_cortex-m-msc-firmware-self-keyed-rotate-xor.mddoc · 4,944 bytesfield-journal/2026-08-08_client-neutral-structured-routing-pr-integration.mddoc · 4,181 bytesfield-journal/2026-08-08_pr-value-triage-and-safe-integration.mddoc · 1,731 bytesfield-journal/2026-08-14_windows-powershell-native-exit-code-pr-review.mddoc · 5,652 bytesfield-journal/2026-08-17_tool-index-r2-fallback-powershell-pwsh-host-fix.mddoc · 12,402 bytesfield-journal/2026-08-20_apk-flutter-banner-ad-removal.mddoc · 6,115 bytesfield-journal/2026-09-03_issue-pr-security-boundary-integration.mddoc · 3,015 bytesfield-journal/CONTRIBUTE-BACK.mddoc · 5,438 bytesfield-journal/_index.mddoc · 6,275 bytesfield-journal/_template.mddoc · 4,474 bytesfield-journal/anonymization.mddoc · 6,771 bytesfield-journal/precedent-auth.mddoc · 1,692 bytesfield-journal/precedent-pentest.mddoc · 25,617 bytesfield-journal/precedent-reverse.mddoc · 13,545 bytesfield-journal/seed-001_elf-packed-loader.mddoc · 3,350 bytesfield-journal/seed-002_go-malware-stripped.mddoc · 3,442 bytesfield-journal/seed-003_web-api-auth-bypass.mddoc · 3,247 bytesfield-journal/seed-004_js-sign-webpack.mddoc · 3,678 bytesfield-journal/seed-005_ad-certipy-esc1.mddoc · 2,040 bytesfield-journal/seed-006_ssrf-cloud-metadata.mddoc · 2,762 bytesfield-journal/seed-007_ntlm-relay-coercer.mddoc · 2,987 bytesfield-journal/seed-008_apk-okhttp-ssl-pin-bypass.mddoc · 4,502 bytesfield-journal/seed-009_ios-jailbreak-detect-bypass.mddoc · 4,662 bytesfield-journal/seed-010_ctf-pwn-rop-x64.mddoc · 5,149 bytesfield-journal/seed-011_pcap-protocol-reverse.mddoc · 4,642 bytesfield-journal/seed-012_log4shell-jndi-rce.mddoc · 5,176 bytesfield-journal/seed-013_kerberoasting-spn.mddoc · 4,725 bytesfield-journal/seed-014_unity-il2cpp-reverse.mddoc · 5,421 bytesfield-journal/seed-015_iot-firmware-uart.mddoc · 6,185 bytesfield-journal/seed-016_k8s-container-escape.mddoc · 6,708 bytesfield-journal/seed-017_xxe-oob-exfil.mddoc · 5,466 bytesops/IDENTITY.mddoc · 2,742 bytesops/README.mddoc · 1,359 bytesops/analysis-blindspot-cookbook.mddoc · 4,154 bytesops/analysis-decision-framework.mddoc · 5,487 bytesops/evidence-finding-path.mddoc · 4,376 bytesops/role-map.mddoc · 3,134 bytesops/sandbox-profile.mddoc · 2,185 bytesops/scope-contract.mddoc · 4,011 bytesops/skill-supply-chain.mddoc · 3,683 bytesops/timeline-workitem.mddoc · 3,586 bytesreferences/community-security-skills.mddoc · 7,679 bytesreferences/domain-coverage-map.mddoc · 2,964 bytesrouting.mddoc · 27,758 bytesrouting_zh.mddoc · 30,207 bytesscripts/append-evidence.ps1runs · 7,285 bytesscripts/bootstrap-manifest.jsonasset · 12,810 bytesscripts/bootstrap-reverse.ps1runs · 41,987 bytesscripts/bootstrap-reverse.shruns · 34,957 bytesscripts/case-guard.ps1runs · 3,950 bytesscripts/case-guard.shruns · 3,625 bytesscripts/case-init.ps1runs · 14,720 bytesscripts/case-init.shruns · 12,624 bytesscripts/consolidate-evidence.ps1runs · 2,751 bytesscripts/consolidate_evidence.pyruns · 3,187 bytesscripts/extract-summaries.ps1runs · 5,598 bytesscripts/lib/BootstrapSupplyChain.ps1runs · 7,222 bytesscripts/lib/HostRuntime.ps1runs · 1,933 bytesscripts/lib/RouteScope.ps1runs · 718 bytesscripts/lib/ToolDiscovery.ps1runs · 45,708 bytesscripts/lib/WorkRoot.ps1runs · 876 bytesscripts/master-route.ps1runs · 8,001 bytesscripts/master-route.shruns · 5,559 bytesscripts/refresh-tool-index.ps1runs · 7,883 bytesscripts/refresh-tool-index.shruns · 17,662 bytesscripts/scan-leaks.ps1runs · 2,997 bytesscripts/smoke.ps1runs · 9,068 bytesscripts/test-bash-workflow.shruns · 2,753 bytesscripts/test-bootstrap-codex-encoding.ps1runs · 5,169 bytesscripts/test-bootstrap-manifest.shruns · 12,805 bytesscripts/test-bootstrap-supply-chain.ps1runs · 11,142 bytesscripts/test-client-neutral-bootstrap.ps1runs · 3,573 bytesscripts/test-client-neutral-bootstrap.shruns · 9,699 bytesscripts/test-consolidate-evidence.ps1runs · 3,150 bytesscripts/test-p0-friction.ps1runs · 22,915 bytesscripts/test-parse-contracts.ps1runs · 7,744 bytesscripts/test-routing.ps1runs · 3,879 bytesscripts/test-routing.shruns · 4,891 bytesscripts/test-workflow-title-safety.ps1runs · 1,833 bytesscripts/update-star-history.ps1runs · 5,572 bytesscripts/verify-doc-facts.ps1runs · 4,250 bytesscripts/verify-doc-links.pyruns · 3,681 bytesscripts/verify-repository-security.pyruns · 8,095 bytesscripts/verify-routing-coherence.ps1runs · 34,503 bytestests/routing-benchmark.jsonasset · 17,741 bytestool-index.md.templateasset · 2,834 bytes
Read excerpt
# Reverse Engineering Skills Master Control
本目录收录了一系列逆向工程相关的技能模块,每个子目录是一个独立模块,内含 `SKILL.md` 描述其适用场景、工具链和工作流程。
## CRITICAL: 路由执行契约(必须立即执行)
读完本文件后,不允许只回复“已读/已理解”。必须按顺序执行:
1. `NOW`:跑平台原生 router(Windows `scripts/master-route.ps1`;Linux/macOS/Kali `scripts/master-route.sh`),从 `config/routing.json` 定 PRIMARY;疑难再读 `routing.md` 三轴附录。
2. `NOW`:平台原生 `case-init` 落地当前分析项目的 `work/<case>/scope.md`;**auth 未 granted 禁止对目标 ACT**。本地离线样本使用 `offline-sample` preset + explicit sample;Force 不得绕过硬门。
3. `ACT`:立即打开 PRIMARY `SKILL.md` 执行 ACTION REQUIRED。
4. `NEXT`:工具路径只认 `tool-index.md`;缺工具 → 平台原生 bootstrap(仅 manifest)。
5. 结论用 Evidence→Finding→Path。报告/journal 是 SHOULD,除非用户要交付物。
**身份**:见 `ops/IDENTITY.md`(轻量路由包 + 工具自举 + journal;**不是** Z3r0 式平台)。