agentleFS
Sign inStart free
z91772524-aiz91772524-ai/pojia-next-mac/skills/pojia-reverse/SKILL.md

pojia-reverse

Skill39 starsChanged 34 days agoMITView on GitHub

Deep reverse engineering for PE, ELF, Mach-O, firmware, drivers, APK/DEX, .NET, Go, Rust, Unity IL2CPP, Unreal, packed binaries, custom VMs, and undocumented protocols. Use when Codex receives a binary, disassembly, pseudocode, crash, native library, game artifact, firmware image, obfuscated application, or needs IDA/Ghidra/Frida/angr/Unicorn automation, algorithm recovery, unpacking, patching, or protocol reconstruction.

We split this skill into the rules it gives an agent

2 rules. About 0 are common, 2 are distinctive, and 0 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈2

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 0

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    Prefer scripts for repeatable extraction: IDAPython, Ghidra, r2pipe, Frida, angr/Z3, Unicorn, parsers, scanners, and patchers.

    line 47
  2. Distinctive:

    Test recovered algorithms against original samples.

    line 48

≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Pojia Reverse

激活确认

当用户输入触发词（逆向、reverse、反编译、脱壳、hook、逆向工程）时，必须首先输出以下激活确认，单独一行：

逆向工程已打开

然后自动进入逆向工程专业模式，使用本skill的全部工具链和知识库来完成用户后续任务。

Work from artifact to verified recovered behavior.

Start

  1. Hash and triage the artifact with scripts/triage_binary.py.
  2. Preserve original files; place derived files in a separate work directory.
  3. Identify format, architecture, compiler/runtime clues, protections, imports, strings, and likely entry paths.
  4. Build an address/function/structure map while analyzing.

Select references

  • Extended specialized skill map: read references/extended-tool-routing.md.
  • Native PE/ELF/Mach-O, drivers, firmware: read references/native-workflow.md.
  • .NET, Java/Android, Go/Rust, Unity/Unreal: read references/managed-game.md.
  • Packers, anti-debug, virtualization, control-flow obfuscation: read references/unpacking-obfuscation.md.
  • Network messages or binary formats: read references/protocol-reverse.md.

Execute

  • Combine static decompilation with debugger traces, watchpoints, hooks, dumps, and controlled input changes.
  • Recover calling conventions, structs, vtables, state machines, packet layouts, and data transformations.
  • Prefer scripts for repeatable extraction: IDAPython, Ghidra, r2pipe, Frida, angr/Z3, Unicorn, parsers, scanners, and patchers.
  • Test recovered algorithms against original samples.

Deliver

Return the artifact hash, target profile, key addresses/functions, recovered data structures, confirmed behavior, scripts, debugger commands, and verification results. Distinguish confirmed observations from hypotheses.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

Reviews can't be read right now.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free