Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dslsdzc/rev-skills --skill re-armgit clone --depth 1 https://github.com/dslsdzc/rev-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dslsdzc/rev-skills/re-arm)<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-arm"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-arm/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-arm"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-arm.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00095 | $0.04317 |
| Opus 5 | $0.00048 | $0.02159 |
| Sonnet 5 | $0.00019 | $0.00863 |
| Haiku 4.5 | $0.00010 | $0.00432 |
Grade A, and why
re-arm scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ARM 架构逆向（Cortex-M/A、Thumb、AAPCS）
何时使用 / 何时不用
- 用：非 Android 场景的 ARM——嵌入式裸机/固件（Cortex-M0/M3/M4/M7、Cortex-A）
- 用：Thumb/ARM 指令集切换、AAPCS 调用约定识别、M 系向量表入口定位、位置相关代码重定位
- 用：MMIO 外设寄存器交叉分析（0x4000xxxx 外设区、LDR 立即数池）
- 不用：Android
.so（走 [[re-android-native]]） - 不用：通用 AArch64 Linux 用户态程序（走 [[re-binary-core]] 通用底座，本技能只补 ARM 特有语义）
- 不用：只需解包固件看内容（[[re-fw-extract]]）/ 分析文件系统配置（[[re-fw-rootfs]]）/ 整体启动固件（[[re-fw-emulate]]）
- 不用：RISC-V / x86 等其他架构（走 [[re-binary-core]]）
工具准备
所有工具先验证再使用。静态分析可免沙箱；qemu 动态执行默认沙箱 + 网络隔离（[[platform-tips]] 最高原则）。
反编译器（Ghidra / IDA 任选其一）
- Ghidra（内置 ARM 处理器模块，Cortex-M0/M0+/M3/M4/M7 选 Cortex 变体（v8-m 仅 M23/M33/M55）、Cortex-A 选 v7，均为小端 LE）：
- Linux: 官方 release 包（需 JDK）；部分发行版仓库有
apt install ghidra/pacman -S ghidra - macOS:
brew install --cask ghidra；Windows: 官方 zip - 验证:
analyzeHeadless -help（headless 模式）或 GUI 导入 ARM ELF - Ghidra 按 Thumb 函数位 0（TMode）自动切换 Thumb/ARM 反汇编；导入时核对处理器变体与端序
- Linux: 官方 release 包（需 JDK）；部分发行版仓库有
- IDA：商业版含 ARM32/ARM64 + Thumb 模块；Freeware 版架构支持范围以官方页面为准
- 导入时确认架构（ARM vs AArch64）与变体——Cortex-M0/M0+ 只有 16 位 Thumb 指令集，选错变体会反汇编出 32 位 Thumb-2 幻觉指令
readelf / file —— 架构与字节序确认（binutils）
- Linux: binutils 自带（
apt install binutils等）；macOS:brew install binutils或 LLVM 系 readelf；Windows: WSL 内 - 验证:
readelf --version
binwalk —— 固件与内嵌文件扫描
- 同 [[re-fw-extract]] 工具准备：
pip install binwalk（推荐）或发行版包；unblob:pip install unblob - 验证:
binwalk --version、unblob --version
qemu-arm / qemu-aarch64 —— ARM 用户态仿真（动态验证）
- Linux:
apt install qemu-user/dnf install qemu-user/pacman -S qemu-user - macOS:
brew install qemu（含用户态）；Windows/WSL: WSL 内 Linux 版 - 32 位为
qemu-arm、64 位为qemu-aarch64；-L <rootfs>指定动态库/链接器来源，-strace跟踪系统调用 - 验证:
qemu-arm --version、qemu-aarch64 --version - 裸机 Cortex-M（无 OS 引导、向量表 0x0 起）qemu-user 不适用——用
qemu-system-arm -machine mps2-an385（Cortex-M3）等板级模型（-s -S接 gdb），或 [[re-emulation]] 用 Unicorn 逐指令
gdb-multiarch —— 交叉调试
- Linux: Debian/Ubuntu
apt install gdb-multiarch（该包在 Debian/Ubuntu 及其衍生的官方仓库有）；Fedoradnf install gdb（官方 gdb 支持多目标、可调裸机 ARM；arm-none-eabi-gdb 不在 Fedora 官方仓库，如需嵌入式专用工具链用官方预编译 ARM 工具链）；Archpacman -S gdb（官方 gdb 已内置 multiarch） - macOS:
brew install gdb（需 Developer Tools 授权，见 [[platform-tips]] macOS 分支）或 WSL 内 Linux 版；Windows/WSL: WSL 内 Linux 版 - 验证: Debian/Ubuntu
gdb-multiarch --version；Fedora/Archgdb --version；载入裸机固件后set architecture armv7-m再file加载，info registers确认 - 真机 SWD/JTAG 调试走 OpenOCD + gdb（[[re-hardware-io]]）；仿真目标用
qemu-system-arm -s -S或qemu-arm -g <port>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 130 lines · 95 tokens per session scan A 84a1ae5a48f5
re-arm is a skill published in the GitHub repository dslsdzc/rev-skills (52 stars, last pushed 12d ago), licensed Apache-2.0. It adds 95 tokens to every session and 4,317 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
reverse-engineering-arm-binaries
Reverse engineers ARM/AArch64 malware by identifying the architecture and instruction set state (ARM/Thumb), parsing ELF/Mach-O ARM headers, and orienting analysis around the ARM calling convention. Activates for requests to reverse ARM binaries, analyze AArch64 malware, or handle ARM/Thumb instruction-set decoding.
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
Reverse Engineering & Binary Analysis
Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering.
ot-ics-attack
A guide to assessing operational technology and industrial control systems such as SCADA, DCS, and PLC environments. These systems monitor and control physical processes and often use specialized network protocols.
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.