Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dslsdzc/rev-skills --skill re-gamegit clone --depth 1 https://github.com/dslsdzc/rev-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dslsdzc/rev-skills/re-game)<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-game"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-game/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-game"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-game.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00092 | $0.08016 |
| Opus 5 | $0.00046 | $0.04008 |
| Sonnet 5 | $0.00018 | $0.01603 |
| Haiku 4.5 | $0.00009 | $0.00802 |
Grade A, and why
re-game scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 208 lines — stays where its author put it; the contents beside it link to each section on GitHub.
游戏逆向（Unity / Unreal / Lua 脚本引擎 / 图形 Shader）
何时使用 / 何时不用
- 用：游戏逻辑逆向（Unity mono/IL2CPP、Unreal）；内存搜索与修改（CE 数值/指针扫描）；函数定位与修改（[[re-patching]]）；反作弊（EAC/BE）检测规避（分析环境内）
- 不用：纯静态读 Unity mono 逻辑（直接 [[re-dotnet]] 反编译
Assembly-CSharp.dll，无需本技能） - 不用：移动端游戏（[[re-mobile]] / [[re-apk]] / [[re-ios]] / [[re-frida]]）
- 不用：只要成品修改器/外挂——本技能是分析路径，不做发布工具，在线对战反作弊风险自担
- 不用：Electron 应用的 V8 字节码 .jsc（走 [[re-electron]]）
工具准备
反作弊游戏分析默认沙箱 + 隔离（[[platform-tips]] 最高原则；[[re-sandbox]] 强制前置）；动态调试按 OS 分支。
Cheat Engine（CE，Windows）
- 安装: 官网 cheatengine.org 下载安装（
choco install cheatengine可选） - 验证: 打开 CE，能 attach 任意进程并做数值扫描（First Scan 有结果）
Unity 工具
- Il2CppDumper（IL2CPP 还原）: GitHub
Perfare/Il2CppDumperreleases（Windows exe / dotnet tool） - mono 场景: 无额外工具，
Game_Data/Managed/*.dll直接交 [[re-dotnet]]（dnSpy/ILSpy） - 验证: Il2CppDumper 对目标
global-metadata.dat能产出dump.cs（类/方法签名）与script.json（函数地址）
Unreal 工具（UnrealFinder 思路）
- UnrealFinder（GitHub
povlhp/UnrealFinder或同类Dumper-7）: 定位GObjects/GNames等全局符号，导出 UObject 类树与函数地址 - 验证: 对目标 UE 游戏 exe 能列出
GWorld/GNames地址并导出对象列表
调试器（按 OS）
- Windows: [[re-x64dbg]]（轻量断点调试）或 [[re-windbg]]（异常分析）
- Linux: [[re-gdb]]（Wine 下跑 Windows 游戏时读 Wine 进程内存，见 [[platform-tips]] Linux 分支 Wine 直读方案）
操作步骤
按顺序执行，每步存档（引擎识别证据、地址与偏移记录、dump 产物 sha256，[[re-triage]] 存证）。
-
运行时/引擎识别：
- 目录特征:
Game_Data/Managed/Assembly-CSharp.dll→ Unity mono；Game_Data/il2cpp_data/+global-metadata.dat→ Unity IL2CPP - Unreal 特征:
Engine/Binaries/、*.pak、<游戏名>-Win64-Shipping.exe；字符串里搜GWorld/GNames - 其他/自研引擎 → 常规 [[re-binary-core]] 流程，不走本技能
- 存档: 引擎类型 + 版本（决定后面工具选型）
- 目录特征:
-
Unity mono vs IL2CPP 导出：
- mono:
Game_Data/Managed/*.dll直接反编译（[[re-dotnet]]，dnSpy/ILSpy 打开 Assembly-CSharp.dll 即得全部 C# 逻辑，无需本技能动态部分） - IL2CPP（无托管 DLL）: Il2CppDumper 导出:
Il2CppDumper.exe <Game.exe> <Game_Data>/il2cpp_data/Metadata/global-metadata.dat → dump.cs（类/方法/字段签名） + script.json（方法地址） + il2cpp.h（结构体）用
dump.cs定位目标方法名，script.json拿对应函数地址 → 到 exe 对应地址调试/patch（[[re-x64dbg]] / [[re-windbg]]）- 存档: dump.cs/script.json + 目标方法地址表
- mono:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 208 lines · 92 tokens per session scan A 6ba00c2aeca7
re-game is a skill published in the GitHub repository dslsdzc/rev-skills (52 stars, last pushed 12d ago), licensed Apache-2.0. It adds 92 tokens to every session and 8,016 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
Reverse Engineering & Binary Analysis
Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering.
minecraft-async
Manage a preinstalled local Minecraft Java client asynchronously for CTF and automation workflows. Use when an agent needs to launch Minecraft in offline mode with alternate usernames, inspect Minecraft logs, focus or type into the X11 game window, send chat or slash commands quickly, or join a multiplayer server by…
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
reverse-engineering-binaries-with-ghidra
Uses Ghidra to disassemble and decompile a binary, navigate to key routines via imports and strings, annotate decompiled code, and run headless scripts to automate extraction of C2, crypto, and config. Activates for requests to reverse engineer with Ghidra, decompile a binary, or script Ghidra headless analysis.