CtrlK
BlogDocsLog inGet started
Tessl Logo

mobile-reverse

Use for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.

70

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

72%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable and well-structured with a clean four-phase workflow and real one-level-deep references. It loses points on conciseness due to a meta-procedure/epigraph preamble and on workflow clarity because per-phase validation and error-recovery feedback loops are absent.

Suggestions

Trim the 'ACTION REQUIRED' meta-procedure block and the duplicate epigraph to reduce token overhead that doesn't directly teach reverse engineering.

Add explicit per-phase validation checkpoints (e.g., verify APK unpacking succeeded, confirm Frida attached) with fix-and-retry feedback loops, especially before risky steps like re-signing and system-cert install.

Consider moving the long Frida crypto-extraction code snippets into a reference file so the overview stays lean.

DimensionReasoningScore

Conciseness

The core methodology is lean (checklists, command tables, code), but the 'ACTION REQUIRED' meta-procedure block and epigraph add policy narration and duplicate context that could be tightened.

2 / 3

Actionability

Provides fully executable, copy-paste-ready commands (frida-ps -U, objection -g ... explore, apktool d app.apk) and complete Frida hook scripts for Cipher/CCCrypt.

3 / 3

Workflow Clarity

A clear four-phase sequence exists with a final self-check checklist, but per-phase validation checkpoints and explicit error-recovery feedback loops are missing, which caps the score for risky operations.

2 / 3

Progressive Disclosure

The body is a concise overview pointing to three well-signaled, one-level-deep references (frida-objection-deep.md, ios-reverse-guide.md, anti-detection-bypass.md), all of which exist.

3 / 3

Total

10

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, well-triggered, and distinctive: it lists concrete mobile reverse-engineering actions, opens with an explicit 'Use for...' trigger, and occupies a clear niche. Voice is appropriately third person/imperative with no over-claims.

DimensionReasoningScore

Specificity

Enumerates multiple concrete actions — 'APK or IPA analysis', 'runtime instrumentation', 'SSL pinning', 'platform protection checks' — rather than vague language.

3 / 3

Completeness

States clearly what the skill does and includes an explicit 'Use for authorized Android or iOS application reverse engineering...' trigger clause answering when to invoke it.

3 / 3

Trigger Term Quality

Uses natural terms a user requesting mobile RE would say ('APK or IPA analysis', 'SSL pinning', 'Android or iOS application reverse engineering and security testing') with good coverage.

3 / 3

Distinctiveness Conflict Risk

Targets a clear mobile-RE niche with platform-specific triggers (APK/IPA), making conflict with non-mobile skills unlikely.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.