Agent skill · Audited from source
Reverse Engineering Api
skill · kalil0321/reverse-api-engineerMIT licenceAudited 17 Oct 2026 · source 72468f04ff44
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 72468f04ff44 and found no filesystem, network or shell access and no hard-coded secrets. What it does: The agent that turns websites into APIs!
Cite
Cite this page
ModelsAtlas. “Reverse Engineering Api (kalil0321/reverse-api-engineer)”. Retrieved 17 Oct 2026. https://modelsatlas.com/skills/kalil0321/reverse-engineering-api
Trust audit
Audit 0.4.1 · source read 17 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | WARN | 1 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
MEDIUMInventory / provenanceskill.no_skill_md
- Why
- no SKILL.md at the audited path
- Fix
- a skill without its instruction file cannot be reviewed as one
Audit 0.4.1 · source sha 72468f04ff44 · 17 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherkalil0321 GitHub userOwner of the repository this skill is read from
- Source folderkalil0321/reverse-api-engineer/plugins/reverse-api-engineer/skills/reverse-engineering-apiThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict72468f04ff44A new audit runs when the source changes
- Repository statusNot archivedLast push 23 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗We did not capture a SKILL.md for this skill, so there is no instruction text to quote here.
Install
Pinned to the audited commit 72468f0
git clone https://github.com/kalil0321/reverse-api-engineer git -C reverse-api-engineer checkout 72468f04ff44
The author documents no install command, so this uses the repository directly. Our verdict covers commit 72468f04ff44 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
72468f04ff44
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/kalil0321/reverse-engineering-api/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All testing skills →knowsuchagency/mcp2cli
Turn any MCP server, OpenAPI spec, or GraphQL endpoint into a CLI. Use this skill when the user wants to interact with an MCP server, OpenAPI/REST API, or GraphQL API via command line, discover available…
ikooky/velric-agent
Authorized web-app reconnaissance with velric-agent. Use when the task needs API surface discovery (endpoints, routes, params) on an authorized SPA or MPA target — static bundle harvest, headless runtime capture, or…
jackwener/opencli
基于 opencli 命令的智能搜索路由器。当用户想要使用 OpenCLI、CLI 或 API 搜索、查询、查找或研究信息时,尤其是涉及指定网站、社交媒体、技术资料、新闻、购物、旅游、求职、金融或中文内容时,务必使用此 skill
jackwener/opencli
Discover and invoke OpenCLI capabilities for websites and Chrome. Find commands, inspect schemas, interpret results and choose browser or adapter tools.
jackwener/opencli
Drive Chrome with OpenCLI to inspect pages, interact with logged-in sites, capture API evidence, and manage native tabs, groups and windows. For reusable adapters, see opencli-adapter-author.
jackwener/opencli
Automatically fix broken OpenCLI adapters when commands fail. Load this skill when an opencli command fails — it guides you through collecting a trace artifact, patching the adapter, retrying, and filing an upstream…
Add this badge to your README
[](https://modelsatlas.com/skills/kalil0321/reverse-engineering-api/)
<a href="https://modelsatlas.com/skills/kalil0321/reverse-engineering-api/"><img src="https://modelsatlas.com/skills/kalil0321/reverse-engineering-api/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about Reverse Engineering Api
What does the Reverse Engineering Api skill do?
Is Reverse Engineering Api safe to install?
What can Reverse Engineering Api access on my machine?
How current is this page?
Sources
- github.com/kalil0321/reverse-api-engineer/tree/main/plugins/reve — the audited source at commit 72468f04ff44 and every finding aboveObserved · 17 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Reverse Engineering Api skill do?
- Is Reverse Engineering Api safe to install?
- What can Reverse Engineering Api access on my machine?