CtrlK
BlogDocsLog inGet started
Tessl Logo

mobile-reverse

Use for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.

68

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Highly actionable and well-structured with real one-level references, but the multi-phase workflow for risky bypass operations lacks inter-phase validation checkpoints, capping workflow clarity. Trimming the meta preamble would further improve conciseness.

Suggestions

Add explicit validation/verification checkpoints between phases (e.g., confirm Frida is attached and hooks fired before advancing to dynamic analysis; verify a bypass actually disabled detection before proceeding).

Tighten or relocate the 'ACTION REQUIRED' preamble and the trailing self-check to reduce non-procedural padding that competes with the actionable core.

Make the per-phase exit criteria explicit (e.g., what artifact or signal must exist to declare Phase 1 complete) so the sequence is verifiable rather than implied.

DimensionReasoningScore

Conciseness

Mostly terse checklists and commands that assume Claude knows the tooling; minor trimmable padding in the 'ACTION REQUIRED' preamble and post-hoc self-check section keeps it just below the lean anchor.

4 / 5

Actionability

Provides concrete, copy-paste-ready commands (frida-ps, objection, apktool d) and complete executable Frida JS hooks covering the common cases, matching the fully-executable anchor.

5 / 5

Workflow Clarity

Has a clear four-phase sequence and a completion self-check, but performs risky/destructive operations (root/jailbreak/anti-debug/SSL-pinning bypass) with no per-phase validation checkpoints; per rubric guidance, destructive work without validation is capped at 3.

3 / 5

Progressive Disclosure

Body serves as an overview with three clearly signaled one-level-deep reference files (frida-objection-deep.md, ios-reverse-guide.md, anti-detection-bypass.md), all verified to exist, with bulk detail appropriately offloaded.

5 / 5

Total

17

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-triggered description that clearly states both what the skill does and when to invoke it, with concrete mobile-RE actions and a distinct niche. Adding common synonyms and file extensions would round out trigger-term coverage.

DimensionReasoningScore

Specificity

Lists multiple concrete actions ('APK or IPA analysis', 'runtime instrumentation', 'SSL pinning', 'platform protection checks') with near-comprehensive coverage, matching the 'lists multiple specific concrete actions' anchor.

5 / 5

Completeness

Explicitly answers both 'what' (the enumerated reverse-engineering/security-testing actions) and 'when' via the 'Use for ...' clause with concrete triggers, matching the top anchor.

5 / 5

Trigger Term Quality

Good natural-term coverage (Android, iOS, APK, IPA, SSL pinning, reverse engineering) but missing common synonyms and extensions users might say (.apk, jailbreak, root detection, Frida), so it sits just below the comprehensive anchor.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear mobile-RE/security niche with distinct triggers (APK/IPA/SSL pinning) and minimal overlap with other skills; uses third-person voice.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.