CtrlK
BlogDocsLog inGet started
Tessl Logo

dotnet-reverse

.NET / C# 二进制逆向。当目标是 .NET assembly(PE 头含 CLR、.exe/.dll 托管程序)、C# 编译产物(含 NativeAOT)、红队 Sharp* 工具(Rubeus / SharpHound / SharpHound 等)、.NET 混淆程序(ConfuserEx / SmartAssembly / Babel / Eazfuscator)、.NET loader / info-stealer / 套壳 malware 时使用。优先用 dnSpyEx + de4dot,需要 AI 直接操作时联动 dnSpy MCP。不用于纯 native 二进制(走 reverse-engineering / ida-reverse)。

74

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured, actionable playbook with executable commands, a clear phased workflow with checkpoints, and appropriately offloaded reference files. The only weakness is mild redundancy between the applicability/routing sections and the description.

Suggestions

Collapse or trim the 触发场景路由 and 适用范围 sections, whose triggers and targets duplicate the frontmatter description and the tool-chain map, to recover token budget.

Consider merging the 何时切出 and 路由上下文 sections into a single concise routing block to reduce repeated hand-off instructions.

DimensionReasoningScore

Conciseness

The body is lean and assumes competence (no basic-concept padding), but the 适用范围 and 触发场景路由 sections restate material already in the description and tool-chain table, so it could be tightened.

2 / 3

Actionability

Provides concrete, copy-paste-ready commands ('de4dot target.exe -o target-clean.exe', 'diec target.exe', 'de4dot --type cfze target.exe') and specific IL-patch snippets ('ldc.i4.0 → ldc.i4.1'), not pseudocode.

3 / 3

Workflow Clarity

A clear six-phase sequence (Identify → Detect → Deobfuscate → Static → Dynamic → Patch) with an ACTION REQUIRED kickoff, gating checkpoints (confirm CLR else SWITCH), and a final self-check checklist.

3 / 3

Progressive Disclosure

The body is an overview that signals three one-level-deep references ([obfuscators.md], [common-workflow.md], [sharp-tools.md]), all verified to exist, keeping inline detail shallow and navigable.

3 / 3

Total

11

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, trigger-rich, and clearly bounded with explicit use-conditions and an exclusion/hand-off clause. It answers both what and when concisely without padding.

DimensionReasoningScore

Specificity

Names multiple concrete actions and targets ('.NET / C# 二进制逆向', '优先用 dnSpyEx + de4dot', '联动 dnSpy MCP') plus specific obfuscators and Sharp* tool families.

3 / 3

Completeness

Explicitly answers what (逆向 .NET assembly, 脱混淆) and when ('当目标是…时使用') with explicit trigger conditions and an explicit exclusion clause.

3 / 3

Trigger Term Quality

Covers natural user phrasing — 'dnSpy', 'ConfuserEx / SmartAssembly / Babel 脱混淆 / 脱壳', 'Sharp* 工具分析', '.NET / C# 二进制逆向' — matching terms users would actually say.

3 / 3

Distinctiveness Conflict Risk

Niche is sharply scoped to .NET/CLR-managed binaries and includes an explicit hand-off ('不用于纯 native…走 reverse-engineering / ida-reverse'), making wrong-skill triggers unlikely.

3 / 3

Total

12

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.