Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dslsdzc/rev-skills --skill re-fw-emulategit clone --depth 1 https://github.com/dslsdzc/rev-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dslsdzc/rev-skills/re-fw-emulate)<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-fw-emulate"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-fw-emulate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-fw-emulate"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-fw-emulate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 38 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 38 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.02457 |
| Opus 5 | $0.00019 | $0.01229 |
| Sonnet 5 | $0.00008 | $0.00491 |
| Haiku 4.5 | $0.00004 | $0.00246 |
Grade A, and why
re-fw-emulate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 122 lines — stays where its author put it; the contents beside it link to each section on GitHub.
固件仿真（QEMU）
何时使用 / 何时不用
- 用：需要运行固件内程序观察行为/验证假设（固件 web 界面、服务端逻辑）
- 用：rootfs 已解出、需要整体启动（全系统仿真）
- 不用：只需静态分析（[[re-fw-rootfs]] 已覆盖）
- 不用：有实物板子且必须真实硬件交互（走 [[re-hardware-io]]，硬件提取/接口调试）
- 不用：目标只是解包看内容（走 [[re-fw-extract]]）
工具准备
所有工具先验证再使用。仿真 = 动态执行，默认沙箱 + 网络隔离（[[platform-tips]] 最高原则）；用户态仿真优先（最轻可行方案）。
qemu-user —— 用户态仿真（最轻）
- Linux:
apt install qemu-user/dnf install qemu-user/pacman -S qemu-user - macOS:
brew install qemu（含用户态与系统态） - Windows/WSL: WSL 内 Linux 版
- 验证:
qemu-arm --version、qemu-mips --version（大端）、qemu-mipsel --version（小端）
qemu-system —— 全系统仿真
- Linux:
apt install qemu-system-arm qemu-system-mips/dnf install qemu-system-arm qemu-system-mips/pacman -S qemu-system-arm qemu-system-mips - macOS:
brew install qemu - Windows/WSL: WSL 内 Linux 版
- 验证:
qemu-system-arm --version
binfmt_misc —— 直接执行交叉程序
- Linux:
apt install binfmt-support qemu-user-static（Debian/Ubuntu 装 qemu-user-static 即自动注册各架构 binfmt 条目；Fedora 用 systemd binfmt 配置）；手动注册:update-binfmts --enable qemu-arm（或 /etc/binfmt.d/ 配置文件） - macOS/Windows: 不支持，用
qemu-<arch>显式调用 - 验证:
ls /proc/sys/fs/binfmt_misc/可见 qemu-arm 条目；之后可直接执行./rootfs_out/usr/sbin/httpd
gdb-multiarch + gdbserver —— 交叉调试
- Linux:
apt install gdb-multiarch/dnf install gdb-multiarch/pacman -S gdb-multiarch；gdbserver:apt install gdbserver（或随 gdb 包提供） - macOS:
brew install gdb（需 Developer Tools 授权，见 [[platform-tips]] macOS 分支）或 WSL 内 Linux 版 - Windows/WSL: WSL 内 Linux 版
- 验证:
gdb-multiarch --version
firmadyne —— 全系统自动仿真框架（思路参考，可选装）
- 安装:
git clone https://github.com/firmadyne/firmadyne，依赖 qemu-system-* 与预编译内核（scripts/ 下下载），首次搭建较重 - 验证:
ls sources/有 getArch.py 等脚本；which qemu-system-mips - 多数单程序分析不需要它——用户态优先（[[platform-tips]] 先给最轻可行方案）
操作步骤
按顺序执行，每步记下结果。
- 用户态仿真（最轻，优先）：
缺库报错 → 交叉file rootfs_out/usr/sbin/httpd # 确认架构：ARM 32/64、MIPS(BE/EL)、RISC-V qemu-arm -L rootfs_out rootfs_out/usr/sbin/httpd # -L 把 rootfs 当 sysroot（动态库/链接器从 rootfs 加载） # 大端 MIPS: qemu-mips -L rootfs_out ... # 小端 MIPS: qemu-mipsel -L rootfs_out ...ldd/readelf -d看依赖，从 rootfs 补库；Web 服务类程序可加-E传环境变量。-strace记录客户程序系统调用（等效仿真内 strace——排查 mmap/ioctl 崩溃点直接用它）-0 <argv0>伪造 argv[0]（程序按调用名分支时用）；-cpu <型号>指定 CPU（如qemu-arm -cpu cortex-a9）- 跑不起来但静态可分析 → 回 [[re-fw-rootfs]] / [[re-binary-core]]，不在仿真上死磕。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 122 lines · 39 tokens per session scan A fc00354dcde3
re-fw-emulate is a skill published in the GitHub repository dslsdzc/rev-skills (52 stars, last pushed 12d ago), licensed Apache-2.0. It adds 39 tokens to every session and 2,457 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
reverse-engineering-arm-binaries
Reverse engineers ARM/AArch64 malware by identifying the architecture and instruction set state (ARM/Thumb), parsing ELF/Mach-O ARM headers, and orienting analysis around the ARM calling convention. Activates for requests to reverse ARM binaries, analyze AArch64 malware, or handle ARM/Thumb instruction-set decoding.
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
Reverse Engineering & Binary Analysis
Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering.
ot-ics-attack
A guide to assessing operational technology and industrial control systems such as SCADA, DCS, and PLC environments. These systems monitor and control physical processes and often use specialized network protocols.
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.