#2222nd of 73 in Skills, plugins and rules

reverse-skill

Routes AI coding agents to reverse-engineering and pentest playbooks

Stars
42k
License
MIT
Last commit
Sep 2026
Last release
Aug 2026
Language
PowerShell
Stars, last 22 weeks+41,957
13 May 2026: 0 stars20 May 2026: 0 stars27 May 2026: 436 stars3 Jun 2026: 1,015 stars10 Jun 2026: 1,430 stars17 Jun 2026: 1,925 stars24 Jun 2026: 5,671 stars1 Jul 2026: 6,902 stars8 Jul 2026: 7,436 stars15 Jul 2026: 8,089 stars22 Jul 2026: 8,586 stars29 Jul 2026: 9,299 stars5 Aug 2026: 18,974 stars12 Aug 2026: 24,217 stars19 Aug 2026: 26,477 stars26 Aug 2026: 29,329 stars2 Sept 2026: 33,906 stars9 Sept 2026: 35,083 stars16 Sept 2026: 35,959 stars23 Sept 2026: 36,844 stars30 Sept 2026: 38,968 stars7 Oct 2026: 40,036 stars14 Oct 2026: 41,957 stars

0 on 13 May 202641,957 on 14 Oct 2026

From GitHub's daily star counts.

Checked on GitHub.

Overview

reverse-skill is a skill/routing package for AI coding agents (Claude Code, Codex, Cursor, OpenCode) that, when the agent hits an APK, binary, obfuscated JS, CTF challenge or pentest target, picks the right methodology and tool (jadx, apktool, Frida, IDA, radare2, Ghidra, BurpSuite) instead of guessing commands. Routing is driven by a single JSON config (43-44 rules) validated by a 173-case regression suite and CI on Windows and Ubuntu, covering mobile, firmware, malware, pwn, EDR bypass and API security.

Who it is for: Security researchers using AI coding agents for reverse engineering and CTF

Strengths

  • Client-neutral routing core works with Claude Code, Codex, Cursor and OpenCode
  • Single routing.json source of truth with a 173-case regression benchmark run in CI
  • Covers a wide scenario matrix: APK, iOS, .NET, JS, firmware, pwn, EDR bypass, CTF
  • Includes case/evidence workflow (scope, timeline, findings) not just tool dispatch

Weaknesses

  • Core scripts are PowerShell-based, with separate bash variants for Linux/macOS/Kali
  • Requires external install of Java/JDK, Node.js 22.12+, Python 3.x and the RE tools themselves
  • CTF-Sandbox-Orchestrator submodule is GPLv3, mixed licensing alongside the MIT core
  • A routing layer, not an RE engine itself, so it depends on tools already being installed

What it needs

  • no GPU
  • Needs Java/JDK, Node.js 22.12+, Python 3.x, jadx, apktool, Frida, IDA Pro, radare2, Ghidra, Binary Ninja

Also in Skills, plugins and rules

See all 73
Also in Skills, plugins and rules
RankProjectScore
1skillsAgent skills for planning, TDD, debugging and code review291.3k starsMIT94 out of 100
2eccAgents, skills, hooks and rules bundle for Claude Code, Codex and other harnesses279.5k starsMIT94 out of 100
3cavemanCuts token use in coding agents with terse replies and compressed inputs Live demo ↗ (opens in a new tab)111.9k starsApache-2.093 out of 100
#4ponytailSkill prompt that makes coding agents write less code and add tests163.6k starsMIT92 out of 100
#5ui-ux-pro-max-skillDesign-system skill that gives coding agents searchable UI styles, palettes and fonts135.9k starsMIT91 out of 100