CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

reverse-engineering-tools

Analyze supplied game binaries, protection components, drivers, dumps, or traces through reproducible disassembly, decompilation, debugging, diffing, and interface reconstruction.

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

80%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exemplary routing/index skill body — extremely token-efficient with a clean one-level-deep reference structure that was verified against the actual bundle. The only real weakness is that the working procedure (record provenance, pick the right reference, label uncertainty) is implied rather than sequenced, with no validation checkpoints.

Suggestions

Make the implicit sequence explicit, e.g. a short numbered flow: 1) record artifact hash/format/architecture before analysis, 2) route to the matching reference file by topic, 3) consult sibling skills for kernel/engine/consequential cases — so the workflow doesn't rely on inference.

Add one concrete checkpoint for the provenance step, e.g. "confirm the recorded hash matches the supplied artifact before drawing conclusions", to give the workflow a validation anchor.

Include one executable example for the record step (e.g. a hash command) to lift actionability from directive to copy-paste ready.

DimensionReasoningScore

Conciseness

The 18-line body is maximally lean: "Record the artifact hash, format, architecture, tool version, environment, and observed addresses" compresses provenance guidance into one sentence, and the routing lines carry no filler. Every token earns its place and no concept Claude already knows is explained.

5 / 5

Actionability

Concrete guidance is present — the exact provenance fields to record (hash, format, architecture, tool version, environment, observed addresses) and an unambiguous topic-to-file routing map, and all five referenced files exist in ./references/. Not 5 because the analysis instructions are directive rather than executable: no example commands (e.g. a hash command), tool invocations, or worked snippets for the 'record and separate evidence' steps.

4 / 5

Workflow Clarity

There is an implicit sequence (record provenance, then consult the topic-specific reference, then route edge cases to sibling skills), but it is never laid out as steps and no checkpoints exist — e.g. nothing says to verify the artifact hash matches or when static inference may be promoted to runtime evidence. Anchor 3 (sequence present but checkpoints missing or implicit) is the best fit; not 2 because the routing map itself is coherent and gap-free, not 4 because the record-then-analyze order is implicit rather than sequenced.

3 / 5

Progressive Disclosure

The body is a lean overview whose entire purpose is navigation: five one-level-deep references, each labeled with the topics it covers, all present in the bundle with no further nesting, plus explicit routing to sibling skills for edge cases. This matches the clear-overview anchor exactly.

5 / 5

Total

17

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description with a clear niche, weakened only by the complete absence of a 'when to use' trigger clause. Adding an explicit "Use when..." sentence with natural trigger phrases would move it to the top band.

Suggestions

Append an explicit trigger clause, e.g. "Use when the user supplies a game executable, driver, memory dump, or execution trace to reverse engineer, or mentions disassembling, decompiling, or unpacking a protected binary."

Include common synonyms and surface forms users actually say — "reverse engineering", "unpacking", "crackme", and tool names like IDA/Ghidra/x64dbg — to broaden natural trigger coverage.

Keep the third-person imperative style; it reads well and needs no change.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions ("reproducible disassembly, decompilation, debugging, diffing, and interface reconstruction") applied to specific artifact types ("game binaries, protection components, drivers, dumps, or traces"), matching the comprehensive-coverage anchor. Not 4 because coverage of the domain's core operations is broad, not just 'several with minor gaps'.

5 / 5

Completeness

The 'what' is clearly and concretely answered, but there is no "Use when..." clause or equivalent explicit trigger guidance, so per the judging guidelines completeness is capped at 3. Not 4 because the 'when' is not even weakly implied — nothing in the text states when this skill should be selected.

3 / 5

Trigger Term Quality

Good natural keywords: "game binaries", "dumps", "traces", "disassembly", "decompilation", "debugging", "diffing" are phrases users would plausibly say. Not 5 because common synonyms and surface forms users actually use are missing — e.g. "reverse engineer", "unpacking", tool names like "IDA"/"Ghidra", or file extensions like ".exe"/".dmp".

4 / 5

Distinctiveness Conflict Risk

The niche is clear (reverse-engineering of game binaries, protection components, and drivers) with distinct trigger terms; minimal overlap risk with general analysis or document skills. Not 4 because the paired domain and action set make it hard to mistake for a neighboring skill.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

gmh5225/awesome-game-security

Path

.claude/skills/reverse-engineering/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.