auto-reverse-orchestrator

What problem does it solve?

Manual reverse engineering of apps, web services, and binaries requires coordinating dozens of disjoint tools, guessing analysis steps, and often produces unreproducible results. This Skill eliminates that friction by automating the entire end-to-end workflow from target intake to verified, reproducible report, with no manual tool coordination required.

Core Features & Use Cases

• Evidence-driven state machine: Automatically selects the correct analysis chain (Android, iOS, web, Windows, native) based on target fingerprint, eliminating guesswork about which tools to use for a given target.
• On-demand tool fetching: Only pulls the specific tools required for your target into the project, no need to install a full global toolbox of 750+ reverse engineering utilities.
• Structured, reproducible artifacts: Each analysis phase emits standardized JSON artifacts, making the workflow fully interruptible and resumable, with final verification that reproduced requests work against the live target.
• Use Case: A security researcher given an unknown Android APK can run the full pipeline to extract its API request signing algorithm, bypass SSL pinning, and produce a verified reproduction script without manually coordinating jadx, Frida, Ghidra, and other tools.

Quick Start

Provide the auto-reverse-orchestrator skill with your target file (such as an Android APK, iOS IPA, Windows EXE, or web URL) and ask it to reverse engineer the target and extract its request signing algorithm.