CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

reverser-overview

Root pointer for the binary reversing lane. Covers triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction.

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/reverser/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean router/catalog: a well-annotated playbook table and a concrete 10-step workflow naming specific tools with a conditional unpack branch. Minor gaps keep it just below top marks — some redundant hosted/standalone phrasing, no example rea_* invocations, and no error-recovery loops.

DimensionReasoningScore

Conciseness

A compact playbook table plus terse numbered steps with no explanations of concepts Claude already knows. Not 5 because steps 8-9 repeat the hosted/standalone split already stated in step 1 in convoluted phrasing that could be trimmed; well above the padded verbosity of a 3.

4 / 5

Actionability

Concrete tool pipeline ('bin_identify — format, arch, NX/PIE', 'bin_packer — entropy + signature', 'rea_find_tools(binary_path, query)', 'bin_r2_script' fallback) with a concrete conditional branch in step 4. Not 5 because no example invocations or arguments for the rea_* tools are shown and step 10 ('Record every observation in the knowledge graph') is vague; clearly above the incomplete-guidance 3 anchor.

4 / 5

Workflow Clarity

A clear numbered 1-10 sequence with an explicit conditional branch and a checkpoint ('If packed → follow the packer-unpacking skill, re-identify after unpack'). Not 5 because there are no error-recovery or validate-fix-retry loops; the work is read-only analysis so the destructive/batch cap does not apply.

4 / 5

Progressive Disclosure

The body is a well-signaled one-level-deep index (playbook table with 'Use for' annotations) matching the good-structure anchor. Not 5 because no bundle files exist to verify the referenced paths, and steps 8-9 inline tool-invocation detail that could live in the sub-skills; well above the buried-reference pattern of a 3.

4 / 5

Total

16

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly defines a broad, specific reversing-lane niche with strong domain keywords, but it lists topics under the generic verb 'Covers' and omits any explicit 'Use when...' trigger clause, capping completeness at 3. It is distinctive within the reversing domain though it deliberately overlaps the sub-skills it routes to.

Suggestions

Add an explicit trigger clause, e.g. 'Use when the user asks to reverse, triage, or unpack a binary, hunt ROP gadgets, or extract firmware.'

Convert noun-phrase topics into verb-led actions ('Triages ELF/PE/Mach-O binaries, extracts and categorizes strings, unpacks UPX/Themida/VMProtect, hunts ROP gadgets...') to strengthen specificity.

Add natural trigger synonyms such as 'disassemble', 'decompile', 'malware analysis', and 'ELF/PE' to improve keyword coverage.

DimensionReasoningScore

Specificity

Lists many concrete capability areas ('triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction') matching the 'several specific actions; minor gaps' anchor. Not 5 because the items are noun-phrase topics under the generic verb 'Covers' rather than verb-led actions, and 'Root pointer' is meta-jargon; clearly above the 1-2-action coverage of a 3.

4 / 5

Completeness

Has a clear 'what' (root pointer covering nine named reversing sub-domains) but no 'Use when...' clause or equivalent explicit trigger guidance in the description, which per the judging guidelines caps completeness at 3. Not 2 because the 'what' is specific rather than vague.

3 / 5

Trigger Term Quality

Includes natural domain keywords users would say — 'reversing', 'triage', 'string extraction', 'packer unpacking', 'ROP', 'Ghidra', 'firmware'. Not 5 because common variations like 'disassemble', 'decompile', 'malware analysis', and 'ELF/PE' are absent; well above the sparse keyword coverage of a 3.

4 / 5

Distinctiveness Conflict Risk

A clear niche (binary reversing) with distinct triggers ('ROP', 'Ghidra', 'packer unpacking', 'firmware extraction'), but as a root router it intentionally overlaps with the sub-skills it routes to (e.g., a 'Ghidra' query matches both this catalog and the ghidra playbook). Fits 'mostly distinct; minor overlap risk with closely related skills' rather than the minimal-conflict 5 anchor.

4 / 5

Total

15

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

PurpleAILAB/Decepticon

Path

packages/decepticon/decepticon/skills/standard/reverser/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.