reverse-engineer

Reverse engineer software binaries and application bundles without source code.

5|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/tiancaiamao/ai --skill reverse-engineer-tiancaiamao
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reverse-engineer
Source: https://github.com/tiancaiamao/ai/tree/main/skills/reverse-engineer
Command: npx skills add https://github.com/tiancaiamao/ai --skill reverse-engineer-tiancaiamao

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you understand how software works internally when the source code is unavailable, incomplete, or too large to inspect manually. It reduces the guesswork involved in analyzing binaries, packaged apps, and bundled components.

Core Features & Use Cases

  • Application Identification: Detects whether a target is a macOS app, Electron app, Tauri app, native binary, Java archive, or Python/npm package.
  • Architecture Discovery: Maps the main executable, bundled resources, configs, plugins, and supporting components to explain how the system is assembled.
  • Protocol and API Inference: Extracts strings and configuration clues to identify endpoints, transports, authentication patterns, and tool-calling behavior.
  • Investigation Reporting: Organizes findings into a structured reverse-engineering report with source maps, open questions, and security observations.
  • Use Case: Use this Skill to inspect a CLI tool or desktop application and quickly produce a clear explanation of its runtime architecture and communication flow.

Quick Start

Ask the skill to analyze the target application or binary and generate a concise reverse-engineering report with architecture, protocol, and security findings.

Frequently Asked Questions about reverse-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I understand a desktop app's architecture without source code?

To reverse engineer a desktop app without source code, you extract embedded strings, inspect configuration files, and trace bundled components to map the runtime architecture. This systematic discovery explains how the application is assembled and operates internally.

Can I analyze Electron and Tauri packages to infer API protocols?

Yes, you can analyze Electron and Tauri packages to infer API protocols. By extracting strings and configuration clues from the application bundle, you identify endpoints, transport mechanisms, authentication patterns, and tool-calling behavior without needing the original source code.

What is the best way to reverse engineer a native CLI tool?

The best way to reverse engineer a native CLI tool is through systematic binary analysis, applying string extraction and config inspection to identify its internal architecture. This generates a structured investigation report detailing the tool's communication flow and security observations.

Does this binary analysis approach work with Java archives and Python distributions?

Yes, this binary analysis approach works with Java archives and Python or npm distributions. It detects the target format and applies component tracing and config inspection to understand the bundled architecture, protocols, and configuration regardless of the packaging method.

How do I generate a reverse engineering report for a macOS app?

You generate a reverse engineering report for a macOS app by systematically discovering bundled resources, extracting strings, and inspecting configs. The resulting report organizes findings into source maps, security observations, and open questions about the application's architecture.