reverse-engineering

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By connorads/dotfiles (GitHub) · coding · 18 stars · scanned at commit 096aebe

Performs static-first reverse engineering and binary decompilation without launching the target. Use when the user asks to inspect, decompile, triage, recover symbols/types/strings, identify endpoints/models/dependencies, explain executable behaviour, or recover implementation patterns from an unknown, stripped, packed, or obfuscated binary, CLI, DMG, macOS app bundle, Mach-O, ELF, PE, WASM, firmware image, Go binary, Android APK/XAPK/AAB, or packaged JavaScript/TypeScript executable. Also use …

Works with any agent that supports SKILL.md skills.

Partially scanned — some files couldn't be read; we'll retry on the next scan

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 10 places.

skills/reverse-engineering/SKILL.md, line 56mktemp -d /tmp/re-<target-name>.XXXXXX
skills/reverse-engineering/SKILL.md, line 62file <binary>
skills/reverse-engineering/SKILL.md, line 110python3 scripts/macos_app_triage.py <binary-or-app> --out /tmp/re-<target-name>/triage

Show 7 more

skills/reverse-engineering/scripts/macos_app_triage.py, line 78stdin = stdin_path.open("rb") if stdin_path else subprocess.DEVNULL
skills/reverse-engineering/scripts/macos_app_triage.py, line 80completed = subprocess.run(
skills/reverse-engineering/scripts/macos_app_triage.py, line 84stderr=subprocess.STDOUT,
skills/reverse-engineering/scripts/macos_app_triage.py, line 92except (OSError, subprocess.TimeoutExpired) as exc:
skills/reverse-engineering/scripts/macos_app_triage.py, line 126completed = subprocess.run(
skills/reverse-engineering/scripts/macos_app_triage.py, line 128stdin=subprocess.DEVNULL,
skills/reverse-engineering/scripts/macos_app_triage.py, line 137except (OSError, subprocess.TimeoutExpired) as exc:

Downloads and installs other software

The author does not mention this.

Found in 3 places.

skills/reverse-engineering/references/android-apk.md, line 117If it is Hermes bytecode and `uvx` is available, decompile it separately:
skills/reverse-engineering/references/android-apk.md, line 120uvx --from 'hermes-dec>=0.1.2' hbc-decompiler \
skills/reverse-engineering/references/android-apk.md, line 127for other versions. If `uvx` is unavailable, use another isolated Python

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'reverse-engineering' ] || [ -L ~/.agents/skills/'reverse-engineering' ]; then echo 'A skill folder named reverse-engineering already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/connorads/dotfiles' "$d" && git -C "$d" checkout --quiet '096aebe7f24cd9d06bcbf758550219e0c5614e4e' -- 'skills/reverse-engineering' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/reverse-engineering' ~/.agents/skills/'reverse-engineering' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'reverse-engineering' ~/.claude/skills/'reverse-engineering' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for connorads/dotfiles shows the score of its lowest-scoring skill.

SkillTrust badge for connorads/dotfiles

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/connorads/dotfiles.svg)](https://zalavijaysinh.github.io/skilltrust/repos/connorads/dotfiles/)

Score history

Date	Version	Score
2026-11-09	`096aebe`	82
2026-11-07	`3d03674`	100