zhaoxuya520/reverse-skill

reverse-skill is a toolkit that makes AI coding assistants like Claude Code, Cursor, or Codex CLI genuinely useful for security work, reverse engineering Android apps, analyzing malware, penetration testing, solving CTF challenges, and similar tasks. Normally, if you ask an AI agent to dissect a compiled binary or find a vulnerability, it guesses at commands and often gets things wrong. This project gives the AI a structured decision-making framework so it picks the right tool and methodology for each specific task. The core idea is a routing system. When you give the AI a task, say, unpacking an APK or deobfuscating JavaScript, a set of rules (laid out in RULES.md) guides it through a routing matrix that matches the task to the correct skill module. Each skill module knows which tools to run and how. So instead of the AI blindly trying random commands, it follows a proven workflow: identify what kind of file or problem you're dealing with, route to the matching skill, execute the right tools in sequence, then produce a report. It also saves what it learned, so future tasks benefit from past experience. The practical users are security researchers, penetration testers, CTF competitors, and anyone doing authorized security analysis. If you're trying to understand how an Android app encrypts its network traffic, this system would route the AI through APK analysis tools, then JavaScript reverse engineering, then HTTP capture, in the right order, with the right tools at each step. It covers a broad range: binary analysis with tools like IDA Pro and radare2, firmware and IoT testing, vulnerability exploitation, EDR bypass research, and even LLM/AI security testing. The CTF module alone bundles over 40 sub-skills for competition scenarios. The project is built as a collection of markdown files and scripts rather than a traditional application. You don't really "run" it directly, you install it alongside your AI coding client, and the AI reads the instructions to understand what tools are available and how to approach different problems. It supports Linux, macOS, and Kali (a security-focused Linux distribution), and relies on existing tools like Java, Node.js, and Python being installed on your machine.