本文へ移動
cccskills
無料GitHub で公開

reverse-engineer

Use when reverse engineering binaries, firmware, mobile apps, JavaScript/Electron apps, .NET assemblies, network protocols, or malware samples; when decompiling, deobfuscating, unpacking, debugging, or hooking shipped artifacts; when solving CTF challenges (pwn, crypto, forensics, web); when a conclusion needs evidence from a shipped artifact rather than available source; or when routing authorized pentest and security-analysis work. Do not use for ordinary review of source code you already have.

インストール方法を見る

含まれるファイル(200)

  • SKILL.md7.9 KB
  • .gitignore6 B
  • references/api-security/README.md6.5 KB
  • references/api-security/references/jwt-oauth-testing.md3.0 KB
  • references/api-security/references/rest-graphql-testing.md3.5 KB
  • references/apk-reverse/README.md13.4 KB
  • references/apk-reverse/references/android-advanced.md11.2 KB
  • references/apk-reverse/references/apk-security-checklist.md7.7 KB
  • references/apk-reverse/references/frida-bypass-kit.md2.7 KB
  • references/apk-reverse/references/frida-cookbook.md14.0 KB
  • references/apk-reverse/scripts/decode.ps15.8 KB
  • references/apk-reverse/scripts/decode.sh4.7 KB
  • references/apk-reverse/scripts/frida-run.ps14.1 KB
  • references/apk-reverse/scripts/frida-run.sh3.9 KB
  • references/apk-reverse/scripts/manifest-summary.ps12.7 KB
  • references/apk-reverse/scripts/rebuild-sign-install.ps16.9 KB
  • references/apk-reverse/scripts/rebuild-sign-install.sh6.4 KB
  • references/attack-chain/README.md20.5 KB
  • references/attack-chain/references/attack-playbooks.md4.2 KB
  • references/attack-chain/references/evasion-cheatsheet.md5.2 KB
  • references/attack-chain/references/lifecycle-checklist.md1.7 KB
  • references/binary-diff/README.md12.9 KB
  • references/binary-diff/references/prompt-template.md4.7 KB
  • references/binary-ninja-reverse/agents/openai.yaml125 B
  • references/binary-ninja-reverse/README.md3.3 KB
  • references/browser-automation/README.md8.3 KB
  • references/browser-automation/references/playwright-cheatsheet.md10.1 KB
  • references/browser-automation/scripts/setup.ps13.8 KB
  • references/browser-extension-reverse/README.md2.2 KB
  • references/browser-extension-reverse/references/extension-analysis.md367 B
  • references/case-review/README.md6.6 KB
  • references/case-review/scripts/review_case.py20.1 KB
  • references/case-review/tests/test_review_case.py6.8 KB
  • references/cloud-k8s/README.md3.0 KB
  • references/cloud-k8s/references/k8s-cloud-checklist.md430 B
  • references/code-audit/README.md2.5 KB
  • references/code-audit/references/sast-review-checklist.md369 B
  • references/config/module-tools.json10.0 KB
  • references/config/routing.json22.7 KB
  • references/CONTRIBUTING.md23.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/agents/openai.yaml394 B
  • references/CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/README.md3.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/references/ad-certificate-abuse.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-agent-cloud/agents/openai.yaml379 B
  • references/CTF-Sandbox-Orchestrator/competition-agent-cloud/README.md3.9 KB
  • references/CTF-Sandbox-Orchestrator/competition-agent-cloud/references/agent-cloud.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-android-hooking/agents/openai.yaml388 B
  • references/CTF-Sandbox-Orchestrator/competition-android-hooking/README.md3.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-android-hooking/references/android-hooking.md1.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-browser-persistence/agents/openai.yaml407 B
  • references/CTF-Sandbox-Orchestrator/competition-browser-persistence/README.md3.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-browser-persistence/references/browser-persistence.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/agents/openai.yaml420 B
  • references/CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/README.md3.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/references/bundle-sourcemap-recovery.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/agents/openai.yaml391 B
  • references/CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/references/cloud-metadata-path.md1.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-container-runtime/agents/openai.yaml409 B
  • references/CTF-Sandbox-Orchestrator/competition-container-runtime/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-container-runtime/references/container-runtime.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-crypto-mobile/agents/openai.yaml376 B
  • references/CTF-Sandbox-Orchestrator/competition-crypto-mobile/README.md2.8 KB
  • references/CTF-Sandbox-Orchestrator/competition-crypto-mobile/references/crypto-mobile.md932 B
  • references/CTF-Sandbox-Orchestrator/competition-custom-protocol-replay/agents/openai.yaml397 B
  • references/CTF-Sandbox-Orchestrator/competition-custom-protocol-replay/README.md3.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-custom-protocol-replay/references/custom-protocol-replay.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/agents/openai.yaml406 B
  • references/CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/references/dpapi-credential-chain.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-file-parser-chain/agents/openai.yaml410 B
  • references/CTF-Sandbox-Orchestrator/competition-file-parser-chain/README.md3.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-file-parser-chain/references/file-parser-chain.md1.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-firmware-layout/agents/openai.yaml402 B
  • references/CTF-Sandbox-Orchestrator/competition-firmware-layout/README.md3.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-firmware-layout/references/firmware-layout.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-forensic-timeline/agents/openai.yaml394 B
  • references/CTF-Sandbox-Orchestrator/competition-forensic-timeline/README.md3.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-forensic-timeline/references/forensic-timeline.md1.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/agents/openai.yaml388 B
  • references/CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/README.md3.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/references/graphql-rpc-drift.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-identity-windows/agents/openai.yaml387 B
  • references/CTF-Sandbox-Orchestrator/competition-identity-windows/README.md3.9 KB
  • references/CTF-Sandbox-Orchestrator/competition-identity-windows/references/identity-windows.md1.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-ios-runtime/agents/openai.yaml392 B
  • references/CTF-Sandbox-Orchestrator/competition-ios-runtime/README.md3.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-ios-runtime/references/ios-runtime.md1.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion/agents/openai.yaml410 B
  • references/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion/README.md3.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion/references/jwt-claim-confusion.md1.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-k8s-control-plane/agents/openai.yaml404 B
  • references/CTF-Sandbox-Orchestrator/competition-k8s-control-plane/README.md3.4 KB
  • references/CTF-Sandbox-Orchestrator/competition-k8s-control-plane/references/k8s-control-plane.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-kerberos-delegation/agents/openai.yaml363 B
  • references/CTF-Sandbox-Orchestrator/competition-kerberos-delegation/README.md2.8 KB
  • references/CTF-Sandbox-Orchestrator/competition-kerberos-delegation/references/kerberos-delegation.md792 B
  • references/CTF-Sandbox-Orchestrator/competition-kernel-container-escape/agents/openai.yaml379 B
  • references/CTF-Sandbox-Orchestrator/competition-kernel-container-escape/README.md2.9 KB
  • references/CTF-Sandbox-Orchestrator/competition-kernel-container-escape/references/kernel-container-escape.md987 B
  • references/CTF-Sandbox-Orchestrator/competition-linux-credential-pivot/agents/openai.yaml373 B
  • references/CTF-Sandbox-Orchestrator/competition-linux-credential-pivot/README.md2.8 KB
  • references/CTF-Sandbox-Orchestrator/competition-linux-credential-pivot/references/linux-credential-pivot.md928 B
  • references/CTF-Sandbox-Orchestrator/competition-lsass-ticket-material/agents/openai.yaml415 B
  • references/CTF-Sandbox-Orchestrator/competition-lsass-ticket-material/README.md3.4 KB
  • references/CTF-Sandbox-Orchestrator/competition-lsass-ticket-material/references/lsass-ticket-material.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-mailbox-abuse/agents/openai.yaml386 B
  • references/CTF-Sandbox-Orchestrator/competition-mailbox-abuse/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-mailbox-abuse/references/mailbox-abuse.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-malware-config/agents/openai.yaml376 B
  • references/CTF-Sandbox-Orchestrator/competition-malware-config/README.md2.7 KB
  • references/CTF-Sandbox-Orchestrator/competition-malware-config/references/malware-config.md1.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/agents/openai.yaml390 B
  • references/CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/README.md3.2 KB
  • references/CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/references/oauth-oidc-chain.md1.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-pcap-protocol/agents/openai.yaml404 B
  • references/CTF-Sandbox-Orchestrator/competition-pcap-protocol/README.md3.4 KB
  • references/CTF-Sandbox-Orchestrator/competition-pcap-protocol/references/pcap-protocol.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-prompt-injection/agents/openai.yaml366 B
  • references/CTF-Sandbox-Orchestrator/competition-prompt-injection/README.md2.5 KB
  • references/CTF-Sandbox-Orchestrator/competition-prompt-injection/references/prompt-injection.md996 B
  • references/CTF-Sandbox-Orchestrator/competition-queue-worker-drift/agents/openai.yaml402 B
  • references/CTF-Sandbox-Orchestrator/competition-queue-worker-drift/README.md3.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-queue-worker-drift/references/queue-worker-drift.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/agents/openai.yaml375 B
  • references/CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/README.md2.7 KB
  • references/CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/references/race-condition-state-drift.md944 B
  • references/CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/agents/openai.yaml379 B
  • references/CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/README.md3.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/references/relay-coercion-chain.md946 B
  • references/CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/agents/openai.yaml400 B
  • references/CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/README.md2.8 KB
  • references/CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/references/request-normalization-smuggling.md958 B
  • references/CTF-Sandbox-Orchestrator/competition-reverse-pwn/agents/openai.yaml370 B
  • references/CTF-Sandbox-Orchestrator/competition-reverse-pwn/README.md3.8 KB
  • references/CTF-Sandbox-Orchestrator/competition-reverse-pwn/references/reverse-pwn.md1010 B
  • references/CTF-Sandbox-Orchestrator/competition-runtime-routing/agents/openai.yaml376 B
  • references/CTF-Sandbox-Orchestrator/competition-runtime-routing/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-runtime-routing/references/runtime-routing.md984 B
  • references/CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/agents/openai.yaml372 B
  • references/CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/README.md2.9 KB
  • references/CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/references/ssrf-metadata-pivot.md1.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-stego-media/agents/openai.yaml385 B
  • references/CTF-Sandbox-Orchestrator/competition-stego-media/README.md2.9 KB
  • references/CTF-Sandbox-Orchestrator/competition-stego-media/references/stego-media.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-supply-chain/agents/openai.yaml385 B
  • references/CTF-Sandbox-Orchestrator/competition-supply-chain/README.md2.6 KB
  • references/CTF-Sandbox-Orchestrator/competition-supply-chain/references/supply-chain.md754 B
  • references/CTF-Sandbox-Orchestrator/competition-template-render-path/agents/openai.yaml415 B
  • references/CTF-Sandbox-Orchestrator/competition-template-render-path/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-template-render-path/references/template-render-path.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-web-runtime/agents/openai.yaml369 B
  • references/CTF-Sandbox-Orchestrator/competition-web-runtime/README.md5.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-web-runtime/references/cookie-hmac-key-reuse-auth-bypass.md4.5 KB
  • references/CTF-Sandbox-Orchestrator/competition-web-runtime/references/routing-runtime.md1.1 KB
  • references/CTF-Sandbox-Orchestrator/competition-websocket-runtime/agents/openai.yaml389 B
  • references/CTF-Sandbox-Orchestrator/competition-websocket-runtime/README.md3.0 KB
  • references/CTF-Sandbox-Orchestrator/competition-websocket-runtime/references/websocket-runtime.md989 B
  • references/CTF-Sandbox-Orchestrator/competition-windows-pivot/agents/openai.yaml386 B
  • references/CTF-Sandbox-Orchestrator/competition-windows-pivot/README.md3.3 KB
  • references/CTF-Sandbox-Orchestrator/competition-windows-pivot/references/windows-pivot.md791 B
  • references/CTF-Sandbox-Orchestrator/competition-zip-archive/agents/openai.yaml413 B
  • references/CTF-Sandbox-Orchestrator/competition-zip-archive/README.md5.7 KB
  • references/CTF-Sandbox-Orchestrator/competition-zip-archive/references/zip-archive.md2.9 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/agents/openai.yaml350 B
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/README.md7.2 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/agent-cloud.md1.6 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/crypto-mobile.md1.9 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/ctf-resources-digest.md5.2 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/identity-windows.md1.8 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reporting.md1.6 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reverse-native.md1.7 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/router-matrix.md5.6 KB
  • references/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/web-api.md1.6 KB
  • references/CTF-Sandbox-Orchestrator/LICENSE34.3 KB
  • references/CTF-Sandbox-Orchestrator/README.md3.9 KB
  • references/ctf-sandbox/README.md1.7 KB
  • references/database-security/README.md1.8 KB
  • references/database-security/references/db-misconfig-checklist.md303 B
  • references/diagram-generator/agents/openai.yaml137 B
  • references/diagram-generator/README.md9.8 KB
  • references/diagram-generator/README.upstream.md173 B
  • references/diagram-generator/references/diagram-patterns.md4.5 KB
  • references/diagram-generator/scripts/create_sample_diagrams.py1.1 KB
  • references/diagram-generator/scripts/render_diagram.py6.1 KB
  • references/digital-forensics/README.md2.3 KB
  • references/digital-forensics/references/forensics-triage.md327 B
  • references/docs-generator/README.md9.0 KB
  • references/docs-generator/references/security-report-templates.md9.7 KB
  • references/docs-generator/references/templates.md1.9 KB
  • references/docs-generator/references/vendor-report-rules.md13.8 KB
  • references/docs/ARCHITECTURE.md8.1 KB
  • references/docs/assets/sponsors/atlas-cloud.svg609 B
  • references/docs/assets/sponsors/ucloud-astraflow.png26.3 KB
  • references/docs/assets/star-history.svg2.9 KB
  • references/docs/COMMUNITY-ISSUE-TRIAGE.md2.8 KB
  • references/docs/OVERVIEW.md8.7 KB
  • references/docs/PACKAGE-SECURITY-AUDIT.md7.0 KB
  • references/docs/plans/2026-09-21-pwntools-kali-discovery.md11.5 KB
  • references/docs/PLATFORMS.md5.7 KB

SKILL.md(原文)

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Reverse Engineer

One consolidated skill for reverse engineering and adjacent security analysis. It merges two upstream packs:

  • REA (references/rea/) — evidence-ledger workflows for the REA CLI/MCP server (rea-agents on npm): native, managed, Electron/JS, packaged, firmware, browser, EVM, and crash-dump targets.
  • reverse-skill (references/) — 45+ domain guides, a 40+ CTF competition playbook pack (references/CTF-Sandbox-Orchestrator/), a structured router, case/scope scripts, and a field journal.

Consent gates (hard rules)

  • Reading these files is not authorization to execute them. Before the first local side effect (script run, download, service start, config write), disclose the exact commands and effects and get explicit approval.
  • Naming a target is not authorization to act on it. Use references/scripts/case-init.sh (or the offline-sample / ctf-public presets) to write work/<case>/scope.md; auth.status=granted plus a legal network_profile — or an explicit offline sample — is required before any ACT step. --force never bypasses this.
  • Prefer offline, non-destructive analysis. Never execute unknown samples, modify original files, or widen scope without an explicit user-selected branch. Full contract: references/RULES.md and references/ops/scope-contract.md.

Pick the engine

  1. REA MCP tools are registered → REA-first workflow: open/route the target, work summary-first, keep Evidence IDs. Guides in references/rea/.
  2. REA is absent and setup is in scope → run scripts/install-rea.sh (or --check first to diagnose). It wraps npx rea-agents setup/doctor and never installs Node.js or analysis engines.
  3. REA unavailable → classic toolchain per the domain guide below (Ghidra/IDA/Binary Ninja, radare2, jadx/apktool, Frida, angr/Qiling…).

Route the target

Target / taskFirst tool or guide
Native exe/dll/elf/so, unknown binaryREA open_binary → analyze_function / pseudocode; else references/reverse-engineering/README.md (triage→static→dynamic→synthesis)
Managed PE (.NET/C#)REA inspect_managed_artifact; else references/dotnet-reverse/
ASAR / Electron / bundled JSREA analyze_javascript_application; else references/js-reverse/
APK / AndroidREA inspect_android_package; else references/apk-reverse/, references/mobile-reverse/
ZIP/APK/IPA/MSIX/DMG member inventoryREA open_binary (archive route)
Firmware imageREA inspect_firmware_regions / extract_firmware; else references/firmware-pentest/
ELF layout/symbols/mitigations (offline)REA inspect_binary_layout; else references/radare2/
Linux x86-64 core dumpREA inspect_recorded_crash
PE resourcesREA inspect_pe_resources
EVM bytecode blobREA inspect_evm_interface
Open browser page / Electron runtimeREA list_browser_targets / list_electron_targets; else references/browser-automation/
HAR / mitmproxy captureREA inspect_web_network_capture
Go/Rust stripped binaryreferences/go-rust-reverse/, REA Ghidra provider
Kernel driver / LKM / .sysreferences/reverse-engineering/kernel-driver-reverse.md
OLLVM / control-flow-flattening obfuscationreferences/reverse-engineering/references/ollvm-deobfuscation.md
Custom VM / DSL VM (JS opcode switch)references/reverse-engineering/dsl-vm-reverse/
Custom protocol / Protobuf / PCAPreferences/protocol-reverse/, references/digital-forensics/
Malware samplereferences/malware-analysis/ (six-stage, YARA/Sigma)
Version diffing / symbol migrationreferences/binary-diff/; N-day patch→exploit: references/patch-diff-exploit/
Exploit development after REreferences/pwn-chain/ (stack/heap/kernel, pwntools)
Anti-debug / anti-VM / packingreferences/reverse-engineering/anti-analysis.md
CTF challenge (any category)references/ctf-sandbox/ → references/CTF-Sandbox-Orchestrator/
macOS / iOS / Mach-Oreferences/macos-reverse/, references/mobile-reverse/
Thick desktop clientreferences/thick-client/; extension: references/browser-extension-reverse/
Hardware (UART/JTAG/SWD)references/hardware-security/
Authorized pentest / web / API / AD / cloud / wirelessreferences/pentest-tools/, api-security/, windows-ad/, cloud-k8s/, wifi-wireless/, attack-chain/ (multi-stage)
Code audit / SBOM / secrets scanreferences/code-audit/, supply-chain-security/
Forensics / threat hunting / OSINTreferences/digital-forensics/, threat-hunting/, threat-intelligence/
Ambiguous routebash references/scripts/master-route.sh --hint "<task>" (rule SSoT: references/config/routing.json); fallback matrix: references/routing.md

Working loop

  1. Scope first: references/scripts/case-init.sh --hint "<task>" (or presets offline-sample / ctf-public). Guard re-check: case-guard.sh.
  2. Route: master-route.sh --hint "<task>" → PRIMARY guide; open its README.md (upstream SKILL.md) and follow it.
  3. Triage cheap → deep: file, strings, checksec, rabin2 -z, ltrace/strace before disassemblers; summary-first in REA (detail: "summary" → inspect_analysis_view for retained evidence).
  4. Escalate: static → dynamic (Frida/angr/Qiling/GDB) → emulation when anti-analysis blocks. Record evidence as you go (references/scripts/append-evidence.ps1 on Windows, references/scripts/consolidate_evidence.py anywhere), findings via references/ops/evidence-finding-path.md.
  5. Stuck: time-box, switch axis (static↔dynamic, Java↔native, observe↔breakpoint); decision framework in references/ops/analysis-decision-framework.md.
  6. Missing tool: run references/scripts/check-tools.sh <module> — read-only per-module readiness (required/optional + bootstrap hint; --all, --list, --json). Tool inventory lives in generated references/tool-index.md (refresh with references/scripts/refresh-tool-index.sh); install only via references/scripts/bootstrap-reverse.sh <capability> after disclosure — capabilities listed in references/scripts/bootstrap-manifest.json.
  7. Report/journal on request: references/docs-generator/, references/field-journal/_template.md.

Layout and path map

  • references/ mirrors upstream skills/ — upstream links like ../ops/, ../scripts/, ../field-journal/ resolve inside it. Upstream ../CTF-Sandbox-Orchestrator/ → references/CTF-Sandbox-Orchestrator/; upstream repo-root RULES.md → references/RULES.md.
  • Every domain's upstream SKILL.md is renamed README.md inside its folder (pre-existing upstream READMEs are preserved as README.upstream.md).
  • references/tool-index.md is generated (gitignored upstream); the template is references/tool-index.md.template.
  • scripts/install-rea.sh (this skill's own script) installs/registers REA: --check doctor, --global npm CLI, --client <id> scoped setup, --dry-run, --print-manual for raw mcpServers JSON.

When NOT to use

  • Plain source-repo architecture questions — use normal code reading.
  • Pulling live secrets/credentials or attacking third-party systems without explicit authorization — refuse; the scope gate exists for this.

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

同じリポジトリのスキル

概要と使いどころ

Single owner of everything under docs/architecture/ — ADRs, architecture and design documents, and architecture diagrams. Routes each deliverable to the right engine: /mermaid-architecture for Markdown-native diagrams, /drawio-architecture for editable .drawio diagrams, and the optional archify skill for interactive standalone HTML diagrams (used only when already installed in the environment; never installed at runtime). Use whenever architecture documentation, ADRs, or architecture diagrams must be created or updated.

日本語の概要は準備中です。原文の説明を表示しています。

afonsoft/skills112026年10月16日 更新

Use when building a new MCP server in TypeScript, Python, or C# that exposes tools to LLMs.

日本語の概要は準備中です。原文の説明を表示しています。

afonsoft/skills112026年10月16日 更新

Use when reviewing code before it merges, whether written by an agent or a human.

日本語の概要は準備中です。原文の説明を表示しています。

afonsoft/skills112026年10月16日 更新

Use when the user asks to connect an AI agent to external apps via Composio, or when Composio CLI or MCP setup fails.

日本語の概要は準備中です。原文の説明を表示しています。

afonsoft/skills112026年10月16日 更新

Use when initializing or migrating an AI agent harness in a repository.

日本語の概要は準備中です。原文の説明を表示しています。

afonsoft/skills112026年10月16日 更新

Use when turning approved plans, specs, PRDs, or Epics into trackable GitHub Issues.

日本語の概要は準備中です。原文の説明を表示しています。

afonsoft/skills112026年10月16日 更新

afonsoft のスキルをすべて見る

このスキルの問題を報告する