CtrlK
BlogDocsLog inGet started
Tessl Logo

anti-reversing-techniques

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzing protected binaries, bypassing anti-debugging for authorized analysis, or understanding software protection mechanisms.

46

Quality

48%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.agent/skills/anti-reversing-techniques/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

22%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill is almost entirely boilerplate authorization/safety guidance with virtually no technical substance in the body. All actionable content is deferred to referenced files that aren't provided, making the SKILL.md itself nearly useless as a standalone reference. The safety framing, while appropriate for the domain, is repetitive across multiple sections and crowds out what should be concrete, executable guidance on anti-reversing techniques.

Suggestions

Add concrete, actionable content to the SKILL.md body: include at least a few specific tools (e.g., x64dbg, Ghidra, strace), common protection patterns (e.g., IsDebuggerPresent, timing checks, packed binaries), and example commands or code for identifying them.

Consolidate the authorization/safety content into a single concise section rather than repeating it across the blockquote, 'Use/Do not use' sections, and 'Safety' section.

Add a workflow with explicit steps and validation checkpoints, e.g.: '1. Run `file` and `strings` on the binary → 2. Check for packing with `detect-it-easy` → 3. If packed, unpack with appropriate tool → 4. Verify unpacked binary loads correctly in disassembler'.

Either provide the referenced `resources/implementation-playbook.md` bundle file or inline the most critical techniques and examples directly in the SKILL.md so it has standalone value.

DimensionReasoningScore

Conciseness

The authorization/safety preamble is lengthy and somewhat repetitive (the blockquote, 'Use this skill when', 'Do not use this skill when', 'Safety' section all cover overlapping ground). The actual technical content is extremely thin, so while there's no over-explanation of concepts Claude knows, the ratio of boilerplate to actionable content is poor.

2 / 3

Actionability

The skill provides no concrete code, commands, tools, or executable examples. The instructions are entirely abstract ('Identify protection mechanisms and choose safe analysis methods') with no specific techniques, tool names, or code snippets. All substantive content is deferred to a referenced playbook file.

1 / 3

Workflow Clarity

The four numbered steps are vague and lack any validation checkpoints, specific commands, or feedback loops. Steps like 'Identify protection mechanisms' and 'Document findings' provide no actionable sequence for a multi-step analysis process involving potentially destructive or complex operations.

1 / 3

Progressive Disclosure

The skill references `resources/implementation-playbook.md` and a sub-skill, which is a reasonable structure. However, no bundle files are provided to verify these references exist, and the SKILL.md itself contains almost no substantive overview content — it's essentially an empty shell pointing elsewhere, which undermines the purpose of progressive disclosure.

2 / 3

Total

6

/

12

Passed

Description

75%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is well-structured with a clear 'Use when' clause and covers a distinct niche in software protection analysis. Its main weakness is moderate specificity — it describes the domain well but could enumerate more concrete actions and techniques. Trigger terms are relevant but could include more common user-facing variations and specific tool/technique names.

Suggestions

Add more concrete actions such as 'identify packing algorithms, defeat anti-tamper checks, deobfuscate control flow, analyze VM-based protections'

Expand trigger terms to include common variations users might say: 'packed binary', 'unpacking', 'code obfuscation', 'VMProtect', 'Themida', 'anti-tamper', 'DRM analysis'

DimensionReasoningScore

Specificity

Names the domain (anti-reversing, obfuscation, protection techniques) and some actions (analyzing, bypassing, understanding), but doesn't list multiple concrete specific actions like 'detect packing algorithms, defeat anti-tamper checks, deobfuscate control flow flattening'.

2 / 3

Completeness

Clearly answers both 'what' (understand anti-reversing, obfuscation, and protection techniques) and 'when' (explicit 'Use when' clause covering analyzing protected binaries, bypassing anti-debugging, or understanding software protection mechanisms).

3 / 3

Trigger Term Quality

Includes relevant terms like 'anti-reversing', 'obfuscation', 'anti-debugging', 'protected binaries', and 'software protection mechanisms', but misses common user variations like 'packed binary', 'packer', 'unpacking', 'DRM', 'code obfuscation', 'VMProtect', 'Themida', 'anti-tamper', 'reverse engineering protections'.

2 / 3

Distinctiveness Conflict Risk

This is a clearly distinct niche — software protection and anti-reversing analysis is specific enough that it's unlikely to conflict with general reverse engineering, malware analysis, or code analysis skills. The trigger terms are well-scoped to this particular subdomain.

3 / 3

Total

10

/

12

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
Dokhacgiakhoa/antigravity-ide
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.