A Reverse-Engineering Skill Router Hits 10,379 Stars by Gating Agents Behind Scope Authorization Before Any Action

GitHub·medium signalXBlueskyLinkedInCopy link

zhaoxuya520/reverse-skill (+612 stars today, 1,583 forks, MIT, pushed 2026-07-31) routes Claude Code, Cursor, Cline and Kiro to the right security methodology instead of letting them guess, packaging 20+ domains — APK/iOS analysis, IDA/radare2/Ghidra binary RE, .NET and malware analysis, firmware, pwn, API security — plus a CTF sandbox orchestrator with 40+ sub-skills, wiring jadx, Frida, apktool and BurpSuite MCP with automated tool detection. The governance layer is the interesting design: a global RULES.md enforces scope gating with 'no target ACT until ready', requiring authorization and network profiling checks before engagement, and /skills/ops/ carries timeline, evidence-chain and role contracts.