replica-recon SKILL.md skillA
replica-recon from realtahailyas/reverse-engineer-app-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add realtahailyas/reverse-engineer-app-skills/replica-recon@git:20261021.9d48208Pins git:20261021.9d48208 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- realtahailyas/reverse-engineer-app-skills
- Path
skills/replica-recon/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261021.9d48208, committed Oct 21, 2026
- Size
- 5,497 bytes
- Repository stars
- 3
- License
- MIT
Reverse-engineers any app into a recon map: screen inventory, user flows, component list, inferred data model and a feature matrix, from public pages, screenshots, app store listings, help docs and the user's own account. The first step of the Replica pack. Use when the user says "clone this app", "reverse engineer X", "how does X work", "map out X", "what screens does X have", "I want to build my own version of X", "copy this app", or pastes an app's URL or App Store link and wants to rebuild…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# replica-recon Everything else in the pack builds from what this skill writes. A bad recon map means a bad clone, so take the time here. Output goes in the user's project: ``` replica/recon.md the recon map (template: recon-map.md in this folder) replica/features.csv the feature matrix (template: features.csv in this folder) replica/screens/ reference screenshots of the original. Never shipped. ``` ## The rules, before anything else This skill rebuilds **functionality and UX patterns**, clean-room style. It studies what the app does and how a user moves through it. It does not take anything the app owns. - **Public sources and the user's own account only.** Never log into an account that is not the user's, never ask for a password, never get past a paywall or a login by any trick. - **Reading, not scraping.** No crawlers, no bulk downloads, no loops. If a browser tool is connected to the user's own browser, read pages at human speed with the user present. - **No source code, no private APIs.** Do not read or save the app's JavaScript bundles, decompile its binary, or log its network calls to copy endpoints. Public API docs are fine to read. …
Read the whole file at its exact version.
How to install
mdr add realtahailyas/reverse-engineer-app-skills/replica-recon@sha256:b1fd6a60cf0bcd48The line at the top of this page pins the label git:20261021.9d48208, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_t4zc5n73ixv5k5c7)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 21, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5497 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
realtahailyas/reverse-engineer-app-skills · 3 stars · license MIT · pushed 2026-10-28 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_t4zc5n73ixv5k5c7 GET https://markdownregistry.com/api/v1/resolve?ref=realtahailyas/reverse-engineer-app-skills/replica-recon GET https://markdownregistry.com/api/v1/blob/b1fd6a60cf0bcd481f6828453da24b9d9f0935ec6e883741e5f620259f13ff40
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.