Reverse Skill

reverse-skill is a skill router pack built for AI coding agents such as Claude Code, Cursor, Cline, and Kiro. When an agent encounters an APK, a compiled binary, obfuscated frontend JavaScript, a CTF challenge, or an authorized penetration testing target, reverse-skill directs it toward the correct methodology, checks which tools are already installed, and executes a repeatable workflow instead of guessing commands from scratch.

The routing pipeline starts with RULES.md and a primary ladder defined in MASTER-ROUTING.md, then passes through a case-init step that sets scope and a network profile before any active testing is allowed. From there, tasks are handed to scenario-specific skills that call the right local tools, MCP servers, or scripts. Progress is tracked through a timeline and an Evidence to Finding to Path chain, producing a final report and a reusable field journal.

Key features include:

• Scenario coverage — dedicated skills for APK and mobile analysis, binary reverse engineering with IDA Pro and radare2, .NET, JS deobfuscation, malware analysis, pentesting, attack chains, firmware, pwn/exploit development, EDR bypass, API security, supply chain, and LLM security
• Tool index — auto-detects installed tools such as jadx, apktool, Frida, and Ghidra across Windows, Linux, macOS, and Kali
• CTF Sandbox Orchestrator — a dedicated module with 40+ sub-skills for competition challenges
• Evidence-based reporting — structured timeline and evidence chain feeding into diagram and report generators

reverse-skill is released under the MIT License, though bundled components carry their own terms: the CTF-Sandbox-Orchestrator submodule uses GPLv3, and the separate Pentest Swarm AI project it can invoke via CLI or MCP is AGPL-3.0. Documentation is maintained in both English and Chinese for its growing community of contributors.