claude-code-reverse SKILL.md skillA
claude-code-reverse from majiayu000/spellbook is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add majiayu000/spellbook/claude-code-reverse@git:20260805.d7c608fPins git:20260805.d7c608f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- majiayu000/spellbook
- Path
skills/claude-code-reverse/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260805.d7c608f, committed Aug 5, 2026
- Size
- 5,847 bytes
- Repository stars
- 290
- License
- MIT
对用户拥有或明确获授权的本机可执行文件、应用二进制和版本产物做只读静态逆向，包括 Claude Code 及其他 CLI、Mach-O、ELF、PE、Wasm 或打包应用。仅在用户明确要求“逆向、扒实现、查二进制字符串/符号/依赖、验证内部行为、比较两个版本”时使用；不要因普通提及软件而触发，也不要用于执行未知样本、绕过授权/计费、破解或再分发。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Local Binary Reverse
对明确指定的本机目标做证据优先的静态分析。默认只读，不执行目标，也不把“可见字符串”夸大为“已证明运行时行为”。
## 自主边界
- 可直接执行：读取用户指定的单个本机文件；运行 `file`、哈希、`strings`、符号表、依赖表、段表和只读反汇编工具；把分析缓存写入当前用户的私有 cache。
- 先征得同意：运行目标、附加调试器、注入/hook、解包到用户目录、安装分析工具、上传样本、分析未获授权的软件或受保护数据。
- 直接拒绝：绕过许可证、计费或访问控制，提取凭据，制作破解补丁，规避检测，或再分发专有代码/资源。
- 不确定所有权、目标路径或交付问题时先澄清，不要扫描整台机器寻找“可能的目标”。
## 1. 锁定目标与问题
先记录：
1. 精确目标路径或命令名。
2. 用户要验证的具体问题，例如 UI 文案来源、功能开关、网络端点、依赖或版本差异。
3. 对比版本的两个精确文件（如适用）。
不要把进程名、应用名或猜测路径当成已确认目标。不要运行目标来“看看会发生什么”。
## 2. 建立文件身份
使用同目录的 `extract.sh`。它只接受普通文件或可由 `command -v` 解析的命令，缓存按内容 SHA-256 隔离并存放在 `${XDG_CACHE_HOME:-$HOME/.cache}/claude-code-reverse/`。
```bash
SKILL_DIR=/path/to/claude-code-reverse
bash "$SKILL_DIR/extract.sh" info --target /absolute/path/to/target
bash "$SKILL_DIR/extract.sh" dump --target /absolute/path/to/target
bash "$SKILL_DIR/extract.sh" search --target /absolute/path/to/target "literal anchor"
bash "$SKILL_DIR/extract.sh" diff --target-a /path/to/v1 --target-b /path/to/v2 "literal anchor"
```
`info` 必须先给出规范化路径、文件类型、字节数和 SHA-256。若目标在分析期间发生变化，重新执行 `info` 和 `dump`；不要复用旧缓存作结论。
## 3. 按格式选择只读工具
先用 `command -v <tool>` 验证工具存在。缺失时报告缺失项，不要悄悄换成会执行目标的方案。
| 格式 | 首选证据 | 可选深入工具 |
|---|---|---|
…Read the whole file at its exact version.
How to install
mdr add majiayu000/spellbook/claude-code-reverse@sha256:46d5dea3447d7314The line at the top of this page pins the label git:20260805.d7c608f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_rtsdwbp2v4n5riaa)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 5, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5847 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
majiayu000/spellbook · 290 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_rtsdwbp2v4n5riaa GET https://markdownregistry.com/api/v1/resolve?ref=majiayu000/spellbook/claude-code-reverse GET https://markdownregistry.com/api/v1/blob/46d5dea3447d7314afa2eacdca36c92d88f86c52456e043ffced1410fa23178c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.