reverse-skill
A routing pack that helps AI coding agents pick reverse-engineering and pentest tools for authorized security
- Stars
- 44k
- Forks
- 6.5k
- Licence
- MIT
- Language
- PowerShell
- Last update
- 2 months ago
- Type
- Other
What it is
reverse-skill is a collection of instruction files and scripts that AI coding assistants (such as Claude Code, Cursor, or Cline) read before doing security analysis tasks. It routes a task such as analyzing an APK, a binary, or frontend JavaScript to a matching methodology and checks which tools are available, instead of the agent guessing commands. The README describes it as aimed at authorized penetration testing, security research, and CTF work.
- Route an Android APK analysis task through the apk-reverse playbook using the AI client
- Check which reverse-engineering tools are installed on the machine via the generated tool index
- Follow a documented case-init and scope step before running tools against a target
- Use the CTF sub-skills for a challenge in a given category
Great for
- Security researchers who already use an AI coding client and want structured playbooks for APK, binary, or JS analysis
- CTF players looking for organized sub-skills by challenge type
- Teams wanting a shared, repeatable workflow for authorized pentest engagements
- Users on Windows or Linux who want a tool index generated from their machine
Not ideal for
- People without authorization to test a target; the README frames all work as authorized, so unauthorized testing is out of scope
- Beginners who want to learn reverse engineering from scratch, since the pack assumes familiarity with tools like jadx, Frida, and IDA
- Anyone expecting a standalone application; it is a set of files that an AI client reads, not a program with its own interface
How to get it
- 1
Clone and build from source
You'll need: Java / JDK · Node.js 22.12+ · Python 3.x · A code AI client such as Claude Code, Codex, Cursor, or OpenCode
Clone the repository
git clone https://github.com/zhaoxuya520/reverse-skill.gitRefresh tool index on Windows
powershell -File skills/scripts/refresh-tool-index.ps1Refresh tool index on Linux / macOS
bash skills/scripts/refresh-tool-index.sh - 2
Run it
- Clone the repository and install the prerequisites listed in the README
- Run the tool index refresh script for your platform
- Open skills/tool-index.md to see which tools were detected
- Point your AI client at the repo and start with README_AI.md or skills/MASTER-ROUTING.md
- Describe your authorized task to the agent so it routes to the matching skill
- 3
Get the most out of it
- Start with skills/MASTER-ROUTING.md, the primary routing ladder, rather than picking sub-skills by hand
- Use skills/routing.md for the full routing matrix when a task does not fit the main categories
- Read the platform docs (kali, linux, macos) that match your operating system
- Review skills/ops/ for the operational contracts the README mentions
Downloads
Strengths
- Covers many scenarios in one place, with a documented routing table and entry points per task type
- Client-neutral design, with documented support for several AI coding clients
- Includes a tool index refresh script for Windows, Linux, macOS, and Kali
Trade-offs
- Requires Java, Node.js 22.12+, and Python, plus an AI client, before it is useful
- The README is truncated, so full install details and some features could not be verified here
- Many referenced tools (IDA Pro, Binary Ninja) are commercial and must be obtained separately
Stats synced from GitHub. The assessment above was drafted with AI from the project's README on 2026-10-29 and may miss recent changes — check the README before relying on a command. MIT licence: free to use, modify and distribute, including commercially, as long as you keep the copyright notice.