What problem does it solve?
Reverse-engineering arbitrary binary artifacts often wastes hours fumbling with incompatible tools, as defaulting to a single decompiler like Ghidra fails for modern formats like Android APKs, browser extensions, and WebAssembly modules. This skill eliminates that friction by automatically routing each artifact to the optimal tool for its format.
Core Features & Use Cases
- Universal Artifact Routing: A curated routing table covers 20+ file classes including native executables (Mach-O, ELF, PE), JVM bytecode, Android/iOS apps, browser extensions, WebAssembly, Python bytecode, React Native Hermes bundles, .NET assemblies, installers, and firmware blobs.
- Verified Tool Inventory: Pre-configured paths and usage instructions for 20+ industry-standard reverse-engineering tools including Ghidra, radare2, jadx, apktool, frida, and mitmproxy, with known-gap workarounds for common installation issues.
- Lawful Use Guardrails: Built-in scope rules ensure all work is performed only on artifacts the user lawfully owns or is authorized to test, with explicit refusals for DRM bypass, malware weaponization, and unauthorized system access.
- Use Case: A security researcher triaging a suspicious Android APK can use this skill to automatically route the file to jadx for Java/Kotlin decompilation and apktool for resource extraction, instead of wasting time trying to load the APK into Ghidra.
Quick Start
Use the decompile skill to reverse-engineer the local Android app file 'suspicious-app.apk' and extract its API endpoints and native library functions.