Repolode
Submit
zhaoxuya520

zhaoxuya520/reverse-skill

An AI agent skill pack that routes reverse engineering, pentest, and CTF tasks to the right playbook and checks which tools are installed.

View on GitHub
Stars
42,626
Forks
6,223
Open issues
35
Last commit
28 days ago

What is it?

reverse-skill is a routing layer for AI coding agents such as Claude Code, Codex, Cursor and OpenCode. When an agent receives a reverse engineering or security task, such as analyzing an APK, a binary, frontend JavaScript encryption, or a CTF challenge, the package sends it to a matching methodology instead of letting the agent guess at commands. The routing core is driven by a single configuration file with 44 routing rules.

The pack also covers working practices around the task. It includes a scope gate that requires authorization and network profile checks before any active testing, per-case directories for scope, timeline and work items, and an evidence-to-finding workflow for reports. A tool index shows which of the referenced tools are installed locally, and a regression suite of 175 benchmark cases runs on Windows and Ubuntu in CI.

The skills span Android and iOS, binaries (IDA, radare2, Ghidra, Binary Ninja), .NET, frontend JS, malware analysis, firmware, API and supply chain security, plus a CTF sub-orchestrator. The project is intended for authorized security research, education and testing of systems the user owns or is permitted to assess.

Key features

  • 01Routes tasks such as APK, binary, JS and CTF work to matching skill playbooks via 44 rules.
  • 02Checks which reverse engineering and pentest tools are installed and records their status.
  • 03Requires an authorization scope check before any active testing begins.
  • 04Creates per-case directories for scope, timeline and work items.
  • 05Runs a 175-case routing regression suite on Windows and Ubuntu.
  • 06Works with multiple AI coding clients through project instructions.

Use cases

  • Having an AI agent analyze an Android APK with jadx, apktool and Frida.
  • Guiding an agent through reverse engineering of a binary with IDA or Ghidra.
  • Working through a CTF challenge with a set of prepared sub-skills.
  • Organizing authorized pentest cases with scope, evidence and report handoff.

Quick start

  1. 1

    Clone the repository

    git clone https://github.com/zhaoxuya520/reverse-skill.git
  2. 2

    Refresh the tool index on Windows

    powershell -File skills/scripts/refresh-tool-index.ps1
  3. 3

    Refresh the tool index on Linux or macOS

    bash skills/scripts/refresh-tool-index.sh

Things to know

  • Requires Java/JDK, Node.js 22.12+ and Python 3.x alongside an AI coding client.
  • The CTF-Sandbox-Orchestrator submodule is GPLv3 and Pentest Swarm AI is AGPL-3.0, unlike the MIT core.

Topics

#reverse-engineering#penetration-testing#ai-agent#security-research#ctf#claude-code#malware-analysis

FAQ

What is reverse-skill?
An AI agent skill pack that routes reverse engineering, pentest, and CTF tasks to the right playbook and checks which tools are installed. reverse-skill is a routing layer for AI coding agents such as Claude Code, Codex, Cursor and OpenCode. When an agent receives a reverse engineering or security task, such as analyzing an APK, a binary, frontend JavaScript encryption, or a CTF challenge, the package sends it to a matching methodology instead of letting the agent guess at commands. The routing core is driven by a single configuration file with 44 routing rules.
Is reverse-skill free to use? What license does it have?
reverse-skill is open source under the MIT license. Check the license terms before using it in commercial products.
Is reverse-skill still maintained?
Actively maintained. The last commit to reverse-skill was on Sep 22, 2026.
What can I use reverse-skill for?
Having an AI agent analyze an Android APK with jadx, apktool and Frida. Guiding an agent through reverse engineering of a binary with IDA or Ghidra. Working through a CTF challenge with a set of prepared sub-skills. Organizing authorized pentest cases with scope, evidence and report handoff.
How do I install reverse-skill?
Clone the repository: git clone https://github.com/zhaoxuya520/reverse-skill.git Refresh the tool index on Windows: powershell -File skills/scripts/refresh-tool-index.ps1 Refresh the tool index on Linux or macOS: bash skills/scripts/refresh-tool-index.sh
Where can I get reverse-skill?
The source code and installation instructions are on GitHub: https://github.com/zhaoxuya520/reverse-skill

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects