Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Unclecheng-li/DeepSec --skill client-reversegit clone --depth 1 https://github.com/Unclecheng-li/DeepSecWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/unclecheng-li/deepsec/client-reverse)<a href="https://agentmods.dev/skills/unclecheng-li/deepsec/client-reverse"><img src="https://agentmods.dev/badge/skills/unclecheng-li/deepsec/client-reverse/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/unclecheng-li/deepsec/client-reverse"><img src="https://agentmods.dev/badge/skills/unclecheng-li/deepsec/client-reverse.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.00945 |
| Opus 5.5 | $0.00022 | $0.00378 |
| Sonnet 5.5 | $0.00011 | $0.00189 |
| Haiku 4.5 | $0.00006 | $0.00094 |
Grade A, and why
client-reverse scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to client-reverse — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
客户端逆向与 Burp 重放 Skill
当请求由客户端（安卓App、浏览器JS、桌面客户端）构造，且存在签名、加密、token状态、设备绑定或反自动化逻辑导致 Burp 无法直接重放时，使用本 Skill。
核心原则
Packet-First：先捕获并分析真实的 HTTP/HTTPS 请求或 WebSocket 流量，确认可用性，再按需逆向阻塞点。逆向是阻塞解决步骤，不是默认入口。
场景路由
已授权安卓 App 渗透测试
不要先用 jadx、ida_pro_mcp 分析 APK，按以下顺序操作：
- 确认目标 App 已安装在连接设备上
- 准备好 Burp 或 Charles 抓包
- 用 scrcpy_vision 打开 App，驱动真实业务流程
- 每个关键动作后检查 Burp/Charles 是否出现 HTTP/HTTPS 或 WebSocket 数据包
- 如果包可见且可重放 → 立即进入
web-security-advanced做 Web/API 安全测试 - 重复"界面动作 → 抓包 → Web 安全分析"循环
- 只有抓不到包/包被加密/无法重放时 → 升级到 jadx → frida_mcp → ida_pro_mcp
MCP 工具链：scrcpy_vision → burp/charles → adb_mcp → jadx → frida_mcp → ida_pro_mcp
浏览器 JS 签名、反爬、WebSocket 握手
- chrome_devtools 查看页面状态和请求链
- js_reverse 定位 token/sign 生成逻辑
- burp 验证重放并确定可变字段
阶段模型：locate → recover → runtime → validation → replay
MCP 工具链：chrome_devtools → js_reverse → burp
桌面客户端 / 本地 signer
- everything_search 定位相关文件
- ida_pro_mcp 静态分析签名函数
- frida_mcp 获取运行时参数
- burp 验证稳定重放
MCP 工具链：everything_search → ida_pro_mcp → frida_mcp → burp
重放就绪检查清单
在进入 Payload 测试前，必须能回答：
- 请求体如何构造？
- 签名/加密输入来自哪里？
- 哪些 cookie、header、token、设备值、时间戳、nonce 是必须的？
- 请求是否依赖顺序或会话状态？
- 哪些字段改动后不会破坏重放？
证据保留
- builder/signer/crypto 代码位置
- 关键 hook 点和运行时观察值
- 可用的 replay 请求样本
- 前置条件、失败模式和反自动化行为说明
参考文档
references/02-client-api-reverse-and-burp.md— 客户端逆向到 Burp 重放总工作流references/android-authorized-app-pentest-sop.md— 安卓 App 渗透 SOPreferences/browser-js-signing-workflow.md— 浏览器 JS 签名工作流references/android-signing-and-crypto-workflow.md— 安卓签名与加密工作流references/android-ui-driven-observation-and-packet-loop.md— 安卓 UI 驱动观察循环references/android-external-url-runtime-first-workflow.md— 安卓外部 URL 测试references/android-network-layer-testing-quick-reference.md— 安卓网络层测试速查references/MCP.md— MCP 能力总文档references/tool-selection-map.md— 工具选型地图
What ships with it
20 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/02-client-api-reverse-and-burp.md 11 KB
- references/android-authorized-app-pentest-sop.md 5.4 KB
- references/android-dynamic-hooking-and-replay.md 2.2 KB
- references/android-external-url-runtime-first-workflow.md 8.7 KB
- references/android-native-signature-analysis.md 1.1 KB
- references/android-network-layer-testing-quick-reference.md 5.0 KB
- references/android-signature-reverse-template.md 2.1 KB
- references/android-signing-and-crypto-workflow.md 7.4 KB
- references/android-static-triage-and-callflow.md 1.5 KB
- references/android-ui-driven-observation-and-packet-loop.md 9.1 KB
- references/browser-js-signing-workflow.md 5.3 KB
- references/browser-locate-and-request-chain.md 2.0 KB
- references/browser-recover-and-shell-reduction.md 1.5 KB
- references/browser-request-chain-template.md 2.0 KB
- references/browser-runtime-fit-and-risk.md 1.6 KB
- references/browser-validation-and-handoff.md 1.1 KB
- references/client-reverse-workflow.md 1.5 KB
- references/MCP.md 61 KB
- references/reporting-and-evidence.md 1.2 KB
- references/tool-selection-map.md 1.2 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 81 lines · 56 tokens per session scan A 3e8c5ba841db
client-reverse is a skill published in the GitHub repository Unclecheng-li/DeepSec (493 stars, last pushed 2mo ago), licensed MIT. It adds 56 tokens to every session and 945 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to client-reverse, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
exploit-reporting
Exploitation finding documentation — initial access reports, exploit chain documentation, CVSS v4.0 scoring, shell/credential inventory, detection gap analysis.
ti-ioc-extraction
Automated IOC extraction from threat reports, logs, and unstructured text — parse hashes, IPs, domains, URLs, email addresses, and CVEs. Covers regex-based extraction, defanging/refanging, bulk hash lookup, IOC deduplication, YARA rule generation from IOCs, and STIX/TAXII formatting for sharing.
ti-yara-hunting
YARA rule writing from behavioral observations and TI report analysis — sample-to-rule conversion, condition optimization, performance tuning, and retrohunting on VirusTotal and ANY.RUN. Covers YARA/YARA-X syntax, yarGen automated generation, and production rule deployment.
m365-mailbox-compromise
Microsoft 365 mailbox compromise chain — OAuth consent phishing, delegate access abuse, mail rule persistence, and token theft via device code phishing. Full kill chain from initial access to persistent email collection.
web
Web application exploitation — the primary category skill for all web-based attacks. This is a routing skill: read this first to identify the attack type, then load the appropriate specialized sub-skill for detailed procedures. Covers 11 technique areas across injection, file access, authentication, and API…
opsec
Operational security management — traffic shaping, scan rate limiting, source IP management, tool signature avoidance, evidence handling, anti-detection patterns.