reverse-engineering

Extract recoverable source-like code from macOS, Windows, and Linux application bundles.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/sujithatzackriya/skills --skill reverse-engineering-sujithatzackriya
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reverse-engineering
Source: https://github.com/sujithatzackriya/skills/tree/main/skills/reverse-engineering
Command: npx skills add https://github.com/sujithatzackriya/skills --skill reverse-engineering-sujithatzackriya

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps you reverse engineer closed-source application bundles by extracting recoverable source-like code (symbols/pseudo-Swift and decompiled logic when available) and producing documentation that is strictly grounded in what the binary reveals.

Core Features & Use Cases

  • Binary-to-source extraction: Reconstructs pseudo source from demangled symbols (and optionally decompiles implementation logic) for macOS/Windows/Linux application bundles such as .app, .exe, and AppImage.
  • Evidence-first documentation: Produces documentation only from extracted code and explicitly avoids assumptions, marketing claims, or general knowledge.
  • Modes for different needs: Supports full analysis, feature-scoped deep dives, comparisons between two apps, and code-only extraction.

Quick Start

Use the reverse-engineering skill when you have the target bundle path and want an evidence-backed extraction workflow for what the app does.

Frequently Asked Questions about reverse-engineering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract source code from a macOS .app or Windows .exe binary?

Binary analysis extracts pseudo source code from demangled symbols and decompiled logic. You provide the application bundle path, and the tool reconstructs recoverable Swift or decompiled implementation logic from the binary.

What is evidence-based documentation in reverse engineering?

Evidence-based documentation strictly grounds behavioral analysis in extracted binary code. It explicitly avoids assumptions, marketing claims, or general knowledge, ensuring all documented app behavior is recovered directly from decompiled symbols.

Can I use Ghidra for decompilation when analyzing an AppImage?

Yes, Ghidra is supported for optional decompilation during AppImage analysis. The workflow extracts demangled symbols and strings first, then applies Ghidra to recover deeper implementation logic from the Linux bundle.

How do I compare two application bundles to find behavioral differences?

You can compare two application bundles by providing both file paths. The analysis extracts code from each binary and documents behavioral differences strictly from the recovered evidence, avoiding speculative claims.

Does binary analysis work for feature-scoped deep dives on specific app logic?

Yes, binary analysis supports feature-scoped deep dives by allowing optional filters. You provide the bundle path and specify a feature, prompting the extraction and documentation of only the relevant recovered code.

What are the limitations of decompiling closed-source application bundles?

Decompilation limitations include reliance on available symbols and strings, meaning recovered pseudo source may not perfectly match original logic. Documentation strictly forbids non-evidenced claims to account for these extraction gaps.