Guide · Agent skill
How to use the Reverse Engineering Skill Router agent skill
Updated · written with AI from the project's own documentation and checked against our catalogue data
The Reverse Engineering Skill Router (skill name reverse-skill-router) is an entry-point skill for an agent skills collection covering reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation and other security work. Its job is to read a request, decide which specialist sub-skill fits, and send the agent there. This guide explains what an agent skill is, how to install this one, how to trigger it, and what safety and setup conditions apply before you rely on it.
Reverse Engineering Skill Routerzhaoxuya520/reverse-skill · MIT Download the skill Quick start
- 1Download the ZIP. Download the reverse-skill-router ZIP from this page.
- 2Unzip into a skills folder. Unzip into ~/.claude/skills/ for a personal install, or into a project's .claude/skills/ folder.
- 3Or upload in the Claude apps. Open Settings, go to Capabilities, then Skills, and upload the skill.
- 4Check the referenced files. Confirm the router scripts, config files and sub-skill folders you need are present, since the reviewed ZIP did not include all of them.
- 5Make a natural request. Describe the task, the target type and your written authorization in plain language.
- 6Let the router pick a module. The agent runs the router script, reads the primary sub-skill and follows its steps.
- 7Review the scope and results. Confirm the scope file, then check that findings are traced from Evidence to Finding to Path.
What is an agent skill and what does this one do?
An agent skill is a folder containing a SKILL.md file that tells an AI agent when to use it and how to work through a task. The agent reads the file when the request matches the skill's description.
reverse-skill-router is a master control file. When a task spans several areas, or it is unclear which specialist applies, the agent reads this file to pick the right sub-skill, such as APK, binary, firmware, API security or forensics. It also sets a fixed order: route first, check scope, then open the chosen sub-skill before doing analysis.
- Routes requests across a table of modules, including APK reverse, binary analysis, firmware pentest, API security, malware analysis and digital forensics.
- Requires an authorization and scope check before the agent works against a target.
- Points the agent to a routing configuration and a tool index for the modules that are present on your machine.
How do you install the reverse-skill-router skill?
You can install the skill in two ways. Download the ZIP from this page and unzip it into one of the skills folders below. Use ~/.claude/skills/ for a personal install available across projects, or a project's .claude/skills/ folder to limit it to one project.
Alternatively, in the Claude apps, open Settings, go to Capabilities, and upload the skill under Skills.
- Personal install: unzip into ~/.claude/skills/ so the reverse-skill-router folder sits directly inside it.
- Project install: unzip into the .claude/skills/ folder of the project you are working in.
- App install: upload the skill through Settings → Capabilities → Skills.
Check what else the skill needs before you rely on it
This ZIP's SKILL.md is only the entry point. The file refers to routing scripts, a routing config, a routing guide, a tool index and local sub-skill folders. The reviewed files did not include those referenced scripts and config files, and most sub-skill paths listed in the source were not in the reviewed files. Treat the routing table as a map of what the full collection is meant to do, not as proof that every route works after a bare install.
The skill also expects the agent to run scripts and use the network. Its listed bootstrap helpers can install some tools, but the source says JEB Pro is manual licence install only and that tools not on the manifest must be installed by hand.
- Referenced scripts: master-route.ps1 on Windows, master-route.sh on Linux, macOS or Kali.
- Referenced config and docs: config/routing.json, routing.md and tool-index.md.
- Local sub-skill directories for each module you want routed.
- Network access, because the skill runs scripts and may fetch tools.
How do you trigger the skill with a natural request?
Describe the task in plain language and name the area. The skill is meant for requests that span modules or where the right specialist is unclear. Simple, single-area requests may be routed directly to a specialist skill by the collection.
Always state that you are working on a system or sample you are authorized to test. The skill's scope gate expects this, and the agent should not act on a target without granted authorization.
- Example: "I have written authorization to test this web app. Which reverse engineering or pentest module should handle the API and the login flow?"
- Example: "This is a CTF binary I downloaded. Which tool fits best for static analysis: radare2, Ghidra or Binary Ninja?"
- Example: "I have an Android APK from my own app. Route this to the right module for decompiling and hooking it."
- Example: "Plan a multi-stage assessment that starts from the internet and reaches the domain controller, with written scope."
What does a typical run look like?
When triggered, the skill tells the agent to run the platform's router script to choose a primary sub-skill, then to create a case scope file, then to open the chosen sub-skill's SKILL.md and carry on from there. Findings are meant to be written as Evidence, then Finding, then Path. Reports and journals are recommended unless you ask for a deliverable.
If the router cannot match the request, the source says the agent should look for methods online and propose a new skill rather than forcing the task into an unrelated module.
- Step 1: route to a primary module using the router script and routing config.
- Step 2: create the case scope file, and do not act against a target unless authorization is granted.
- Step 3: open the primary sub-skill and follow its action steps.
- Step 4: record conclusions as Evidence, Finding and Path.
Safety notes: scope, authorization and scripts
The skill sets a hard gate. Its source says the agent must not act against a target while authorization is not granted, and that force options do not bypass that gate. For the local offline sample preset, the source describes using an explicit sample instead.
Because the routing itself can point at offensive work, use this skill only on systems you own or have written authorization to test. The skill runs scripts and uses the network, so read the scripts before running them, and run them in a controlled environment.
- Only work on targets you own or have written authorization to test.
- Read master-route and bootstrap scripts before running them.
- Keep the authorization and scope file with the case record.
- Do not use the skill for general coding or writing tasks, which it does not cover.
Tips for getting good results
Name the exact file type or target, such as APK, ELF binary, firmware image, browser extension or REST API. The more specific the request, the less the router has to guess.
If the routed module is not what you wanted, say so and ask for a different specialist. The source notes that the agent should not invent sub-skills or paths. Check the tool index for what is actually installed on your machine.
- State the file type, platform and whether you have authorization.
- Ask the agent which sub-skill it picked and why.
- Expect to install some tools yourself, and check which ones are available before a long task.
What people use it for
- Choosing between radare2, Ghidra or Binary Ninja for a binary a student is studying in a CTF.
- Routing an Android APK analysis to the APK reverse module for decompiling and hooking.
- Planning a multi-stage authorized assessment that spans reconnaissance through lateral movement.
- Finding the right module for an API security test covering REST, GraphQL or WebSocket.
Frequently asked questions
Is reverse-skill-router free to use?
The source reviewed here states the skill is released under the MIT licence. It does not mention prices, so check the licence text on the repository before you rely on it. Some tools the skill references, such as JEB Pro, are commercial and must be installed by you under their own licence.
What do I need to run reverse-skill-router?
You need an agent that supports skills, such as the Claude apps or Claude Code, plus the router scripts, config files and local sub-skill folders the skill refers to. The reviewed ZIP did not include all of those, so check them first. The skill also runs scripts and uses the network.
How do I install reverse-skill-router in Claude Code?
Download the ZIP from this page and unzip it into ~/.claude/skills/ for a personal install, or into the .claude/skills/ folder of a project. In the Claude apps, use Settings, then Capabilities, then Skills to upload it.
Is reverse-skill-router safe to run?
It has a safety gate: the agent should not act against a target without granted authorization. It also runs scripts and uses the network, so read the scripts first and use it only on systems you own or are authorized to test.
What are the alternatives to reverse-skill-router?
The source does not compare this skill with other tools. If you only need one area, you can use that area's specialist skill directly, such as the APK, binary or API security skills in the same collection, or a standalone tool you already know.
Why does the skill not work after I install it?
The most likely reason is missing files. The SKILL.md refers to routing scripts, config and tool-index files, and sub-skill folders that were not in the reviewed ZIP. Make sure those are present and that the tools for the module you need are installed and listed as available.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
Use reverse-skill-router if you are a security researcher, student or team that wants one starting point for many reverse engineering and pentest modules, and you are willing to set up the referenced scripts and sub-skills. Pick something else if you need a general coding or writing assistant, or if you expect the full sub-skill collection and scripts to arrive in this ZIP, since the reviewed files did not include most of them.
Download the skill