reverse-engineering skills

464 tagged reverse-engineering, measured the same way as everything else here.

Browse within: penetration-testing 236web-security 235bugbounty 234fuzzing 234reconnaissance 234malware-analysis 147dfir 129mitre-attack 121detection-engineering 119android 41ghidra 40malware 37static-analysis 37APK 36

wakaru

01

pionxzh/wakaru

Skill Claude CodeCodex

Turn minified, bundled, or transpiled JavaScript back into readable modules. Use when you encounter unreadable production JS — a webpack/esbuild/Metro/Rollup bundle, a minified vendor script, Babel/TypeScript/SWC-transpiled output, or a single mangled .js file — and need to read, audit, debug it, or recover a…

not rated 1.0k +14 changed 2d ago A SkillSpector: warn 99 tokens original Apache-2.0

ergrelet/windiff

Skill Codex

Generate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases. Use when comparing Windows builds or binaries such as ntoskrnl.exe, ntdll.dll, win32k.sys, ci.dll, or cng.sys to find changed syscalls, symbols, types, mitigation flags, callbacks…

not rated 392 +2 2d ago A SkillSpector: pass 140 tokens GPL-3.0

vwww-droid/Mira

Skill Codex

Route Mira detection findings into a reusable knowledge pipeline. Use when Codex needs to turn a new detection clue, risk-environment observation, or research note into topic confirmation, case capture, topic maintenance, and article update suggestions inside the Mira repository.

not rated 105 changed 1mo ago A 56 tokens GPL-3.0

osint

04

0dayInc/pwn

Skill Claude Code

Drive extroosint with the right kind, feeds, pivots, and keys.

not rated 86 +1 today A SkillSpector: pass 21 tokens original MIT

osgrep-reference

05

tdimino/bg3se-macos

Skill Claude Code

Comprehensive CLI reference and search strategies for osgrep semantic code search. Use for detailed CLI options, index management commands, search strategy guidance (architectural vs targeted queries), and troubleshooting. Complements the osgrep plugin which handles daemon lifecycle.

not rated 62 1mo ago A SkillSpector: warn 52 tokens original MIT

gdb

06

betab0t/skills

Skill Claude CodeCodex

Debug and trace C/C++/Rust programs with the GNU Debugger (GDB) without blocking the agent. Use when you need to set tracepoints, inspect variables, or monitor a running process while staying responsive to the user.

not rated 47 5mo ago B 50 tokens original MIT

paoding-skill

07

longyunfeigu/paoding-skill

Skill Codex

Use when studying, reverse-engineering, comparing, reviewing, or learning from AI skill packages, SKILL.md files, Claude/Codex skills, prompt workflows, or agent playbooks; use when the user wants reusable skill design patterns, a keep/cut review, Markdown report, structured pattern notes, or multi-page web handbook.…

not rated 24 3mo ago A 105 tokens original Apache-2.0

meltedinhex/analyst-ai-pack

Skill Claude CodeCodex

Uses Ghidra to disassemble and decompile a binary, navigate to key routines via imports and strings, annotate decompiled code, and run headless scripts to automate extraction of C2, crypto, and config. Activates for requests to reverse engineer with Ghidra, decompile a binary, or script Ghidra headless analysis.

not rated 22 +1 3mo ago A 80 tokens original Apache-2.0

sector-b79/Malware-And-Reverse-Engineering-Skill-for-AI-Agents

Skill Claude CodeCodex

Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…

not rated 19 +1 5mo ago A 75 tokens

shangdi-w/-skills

Skill Claude CodeCodex

A toolkit for taking software apart to inspect how it works, across formats such as Android packages, Windows programs, Linux binaries, JavaScript, and firmware.

not rated 14 4mo ago A 97 tokens

ai-product-teardown

11

w93139/ai-product-teardown

Skill Codex

Reverse-engineer an AI product from authenticated UI evidence, including autonomous screenshot collection when safe browser or desktop controls are available, producing traceable user journeys, Agent I/O contracts, functional-equivalent prompts, or layered product architecture. Use for read-only product teardowns…

not rated 12 1mo ago A 88 tokens original MIT

web-reconstruction

12

zaoshangduziteng/web-reconstruction

Skill Codex

Reconstruct a referenced website, page, interaction, or WebGL/WebGPU/Canvas effect from a URL or supplied evidence. Use for faithful site cloning, offline mirrors, responsive page replication, SPA fixture replay, visual-effect extraction, design transfer, and continued fidelity work on an existing replica. Not for…

not rated 11 1mo ago A 79 tokens original MIT

robinhood-cli

13

zaydiscold/robinhood-cli-mcp-api

Skill Claude CodeCodex

Use this skill when the user asks to inspect, research, plan, or operate a Robinhood account through the repository's CLI, MCP server, or importable API. It routes account reads, portfolio analysis, equities, options, orders, watchlists, recurring investments, settings, tax lots, tax documents, tax-rule and…

not rated 11 changed 1mo ago A 102 tokens original MIT

deepfork

14

GerardoRdz96/deepfork

Skill Claude CodeCodex

Reverse-engineer any open-source repo into a clean, queryable understanding and a rebuildable blueprint — then build your own customized version from the blueprint. Use when the user wants to understand how a repo works, learn its architecture, or rebuild a tool with their own changes ("how does X work", "rebuild X…

not rated 10 3mo ago A 81 tokens original MIT

JS Reverse Analyzer

15

sjhhh024-cmyk/Spider-JS-Mcp-Skills

Skill Claude CodeCodex

A general-purpose guide for examining JavaScript code to identify website encryption, request signatures, and anti-bot checks, then documenting the findings in Python.

not rated 10 8mo ago A 37 tokens original Apache-2.0

iron-system

16

william1mufassa/IRON-SYSTEM

Skill Claude CodeCodex

Meta-skill for reverse loop engineering that transforms an AI agent's approach to any complex task. Combines systematic deconstruction (reverse engineering) and iterative construction (loop engineering) in an EXTRACT→SYNTHESIZE→BUILD→AUDIT cycle. Includes 7 named tactical loops (FORGE, SIEGE, PRISM, RAZOR, MIRROR…

not rated 9 3mo ago A 235 tokens original MIT

claude-code-prompt

17

xiufengsun/claude-code-prompt

Skill Claude CodeCodex

Reference Claude Code's prompt engineering patterns for AI/Agent development. Provides best practices for system prompts, tool design, agent orchestration, and safety.

not rated 6 6mo ago A 36 tokens original MIT

auto-re

19

timwhitez/AutoRE-CLI

Skill Codex

A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.

not rated 6 changed 5d ago A 82 tokens original MIT

broadside

20

HuginnIndustries/CodeCartographer

Skill Claude CodeCodex

Interpret a Broad-Side batch reconnaissance run. Use after codecartobroadside collect has produced .codecarto/broadside/ / results, to triage scouting signals before or during an interactive CodeCartographer pipeline run.

not rated 6 changed 29d ago A 52 tokens original MIT

website-to-cli

21

dennisonbertram/website-to-cli

Skill Claude CodeCodex

Turn any website into a fast, beautiful command-line client. Use when the user wants a CLI that replicates a site's features by capturing its network traffic (HAR), recovering the private/undocumented API behind it, and generating a typed terminal client that calls those endpoints directly instead of driving a browser…

not rated 5 2mo ago A 111 tokens original MIT

ghidra-agent-cli

22

ByteLandTechnology/headless-ghidra

Skill Claude CodeCodex

Rust CLI reference for the headless-ghidra pipeline. Covers command syntax, flags, output contract, artifact paths, and workspace layout for all ghidra-agent-cli subcommands. Load when: constructing a ghidra-agent-cli command, interpreting its output, resolving a flag or artifact path question, or debugging CLI…

not rated 5 5mo ago A 95 tokens

analyze-cc-feature

23

Prajwalsrinvas/claude-code-reverse-engineering

Skill Claude Code

Reverse engineer and analyze a specific feature in Claude Code's source. Use when the user wants to understand how a Claude Code feature works internally, or when asked to analyze Claude Code internals.

not rated 3 3mo ago A 44 tokens original MIT

il2cpp-decompiler

24

rkuhn153/il2cpp-decompiler

Skill Claude CodeCodex

Static analysis for Unity IL2CPP games via il2cpp-decompiler-agent MCP (listdumps, loadproject, searchsymbols, getclassinfo, decompilemethod). Use when runtime is IL2CPP, GameAssembly.dll is involved, or remakes like Who's Your Daddy Remake. Always MCP-first — do not start with Il2CppStudio CLI.

not rated 3 1mo ago A 80 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: