Skip to content
Get packs

Case Review Auditor

Checks a reverse-engineering or security case folder for complete evidence, traceability and file hashes before handoff.

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
3 files

What it does

When installed, the agent can audit an existing investigation case folder (scope notes, evidence records, work items, timeline and report Markdown) and report what is missing or inconsistent, such as findings with no evidence or evidence files whose SHA-256 hash no longer matches. It runs a Python 3 script in read-only mode, so it is meant to check paperwork and integrity rather than analyse a target itself. It is aimed at people who need a defensible record before a formal report is handed over.

Great for

  • Security or forensics analysts preparing a case package for a formal report
  • Teams running CTF or authorized reverse-engineering work who want consistent evidence records
  • Reviewers who need a repeatable JSON check of case files for CI

Skip it if

  • Performing or guiding actual reconnaissance, exploitation or target testing, because the skill itself forbids this and only audits files
  • Legal sign-off: the skill states it is not legal advice and does not replace an organization's evidence-handling procedures
  • Cases without an existing work/<case>/ package, since there is nothing for it to review

Try asking

  • “Review my case folder work/acme-ctf before I write the final report”
  • “Check whether every finding in my report links to an evidence record”
  • “Verify the SHA-256 hashes of the artifacts in my case and tell me about any mismatch”
  • “Run a strict review and save the Markdown result to report/case-review.md”
Step-by-step guide: how to use Case Review AuditorInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    case-review.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip case-review.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip case-review.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the non-strict review first to fix errors, then rerun with --strict before claiming a handoff is complete
  • Record content_hash and artifact_path for evidence files so that --verify-hashes can check them
  • Keep the original case folder as the source of truth; the review is designed not to modify it, but redirecting output writes a new file

What's inside

  • scripts/review_case.py
  • SKILL.md
  • tests/test_review_case.py

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.