# Reverse Skill Router

Use the reverse-skill repository from Codex for authorized reverse engineering...

- Repository: https://github.com/zhaoxuya520/reverse-skill (43923 stars)
- Category: Testing
- License: MIT
- Last updated: 2026-09-22
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add zhaoxuya520/reverse-skill --skill reverse-skill-router -g -a claude-code -y`
Codex: `npx skills add zhaoxuya520/reverse-skill --skill reverse-skill-router -g -a codex -y`
Cursor: `npx skills add zhaoxuya520/reverse-skill --skill reverse-skill-router -g -a cursor -y`
Gemini CLI: `npx skills add zhaoxuya520/reverse-skill --skill reverse-skill-router -g -a gemini-cli -y`

## Description

Use the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Reverse Skill Codex adapter

This plugin is an optional Codex entry point. The repository remains the canonical, client-neutral implementation.

When the current workspace is the `reverse-skill` repository:

1. Read `RULES.md` at the repository root.
2. Run the platform-native `skills/scripts/master-route` entry with the user's task to select the PRIMARY skill from `skills/config/routing.json`.
3. Before any target action, create and validate `work/<case>/scope.md` with the platform-native `case-init` and `case-guard` scripts.
4. Open the selected `skills/<PRIMARY>/SKILL.md` and follow its task-specific instructions.
5. Resolve tools only through the generated `skills/tool-index.md`; do not register MCP servers or install tools unless the user requested that action.

If the repository is not the current workspace and no local repository path was supplied, explain that this adapter does not bundle a second copy of the router. Ask the user to open or clone `https://github.com/zhaoxuya520/reverse-skill` and then continue from its `RULES.md`.

Do not treat the presence of this plugin, a target name, or a sample path as authorization. Authorization comes from the repository's scope contract.