Live survey286 models · 13 providers · 19,992 auditsAudited verification-before-completion · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

awesome-reverse-engineering

skill · morluto/awesome-reverse-engineeringCC0-1.0 licenceAudited 24 Oct 2026 · source f6a8a31bc1cc

★ 1,197pushed today
!CAUTIONGrade C · 79/100 · 15 findings · f6a8a31
1,197repo stars · whole morluto/awesome-reverse-engineering
InstallView source on GitHub ↗

Is it safe? With care — CAUTION, grade C (79/100). We read this skill's source at commit f6a8a31bc1cc and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 15 findings, 1 critical or high. What it does: Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “awesome-reverse-engineering (morluto/awesome-reverse-engineering)”. Retrieved 24 Oct 2026. https://modelsatlas.com/skills/morluto/awesome-reverse-engineering

Trust audit

Audit 0.4.1 · source read 24 Oct 2026

Trust score79/100!CAUTION C
0 critical1 high1 medium13 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade C is shared by 84 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS13
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL1
L3 InventoryThe files and declarations match the sourceWARN1
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: instruction override, no behavioural pass.

Findings (15)

HIGHPrompt injectionprompt.override · docs/priority-candidates.md:33
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
| [pymobiledevice3](https://raw.githubusercontent.com/doronz88/pymobiledevice3/3a173489266e23b5574a89b3c152fb290b760024/README.md) · [source 1](https://doronz88.github.io/pymobiledevice3/guides/ios17-
Why
asks the agent to drop prior instructions or safety
Fix
remove the instruction
MEDIUMInventory / provenanceskill.no_skill_md
F-13 Inventory / provenanceCWE-1104Layer L3
Why
no SKILL.md at the audited path
Fix
a skill without its instruction file cannot be reviewed as one
LOWCode injectioncode.eval_exec · examples/resource-intake/verify.py:92
F-02 Code injectionCWE-78 · CWE-94 · CWE-95Layer L1
shim = "globalThis.print = console.log; new Function(require('fs').readFileSync(process.argv[1], 'utf8'))();"
Why
evaluates text as code
Fix
remove; use a parser or a dispatch table
LOWInsecure cryptocrypto.weak_hash · docs/priority-candidates.json:810
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
"reproduced_scope": "Self-authored YARA-triggered extractor and RC4 config; wrong-key and no-marker samples yield no config",
Why
No further detail recorded for this rule.
Fix
—
LOWInsecure cryptocrypto.weak_hash · examples/resource-intake/malduck_modules/duckcfg/__init__.py:1
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
"""Self-authored Malduck extractor for the DKCFG1 fixture: marker, 8-byte RC4 key, uint16 length, ciphertext."""
Why
No further detail recorded for this rule.
Fix
—
LOWInsecure cryptocrypto.weak_hash · examples/resource-intake/malduck_modules/duckcfg/__init__.py:2
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
from malduck import Extractor, rc4
Why
No further detail recorded for this rule.
Fix
—
LOWInsecure cryptocrypto.weak_hash · examples/resource-intake/malduck_modules/duckcfg/__init__.py:13
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
plain = rc4(key, p.readv(addr + 16, size))
Why
No further detail recorded for this rule.
Fix
—
LOWInsecure cryptocrypto.weak_hash · examples/resource-intake/verified.json:38
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
"scope": "Self-authored YARA-triggered extractor and RC4 config; wrong-key and no-marker samples yield no config"
Why
No further detail recorded for this rule.
Fix
—
LOWNetwork egressnet.raw_ip · examples/resource-intake/verify.py:41
F-04 Network egressCWE-200 · CWE-319Layer L1
DUCK_PLAIN = b"c2=http://192.0.2.10/gate;c2=http://198.51.100.7/gate;campaign=trace-7;sleep=300"
Why
No further detail recorded for this rule.
Fix
—
LOWNetwork egressnet.raw_ip · examples/resource-intake/verify.py:42
F-04 Network egressCWE-200 · CWE-319Layer L1
DUCK_CONFIG = {"family": "duckcfg", "urls": ["http://192.0.2.10/gate", "http://198.51.100.7/gate"], "campaign": "trace-7", "sleep": 300}
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · examples/resource-intake/verify.py:28
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
GOLDEN = bytes.fromhex("534d4b310500017472616365")
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · examples/resource-intake/verify.py:321
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
assert bytes.fromhex(observed["physical"]) == b"MPFS-PHYS-MARK-1" == bytes.fromhex(observed["pmem_file"])
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · examples/resource-intake/verify.py:323
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
assert bytes.fromhex(observed["virtual"]) == b"MPFS-VIRT-MARK-2" and observed["virt2phys"] == PAGE + 0x678
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · examples/resource-intake/verify.py:370
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
assert len(wire) == 47 and wire[:14] == bytes.fromhex("0200000000020200000000010800")
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · examples/resource-intake/verify.py:372
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
pseudo_header = bytes.fromhex("c0000201c0000202") + struct.pack("!BBH", 0, 17, 13)
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha f6a8a31bc1cc · 24 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishermorluto GitHub userOwner of the repository this skill is read from
  • Source foldermorluto/awesome-reverse-engineeringThe exact folder we audited
  • LicenceCC0-1.0As the repository states it
  • Commit pinned for this verdictf6a8a31bc1ccA new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

We did not capture a SKILL.md for this skill, so there is no instruction text to quote here.

Install

Pinned to the audited commit f6a8a31

Download folder ↗
git clone https://github.com/syssec-utd/pylingual && git -C pylingual checkout 11a1516d84a6c2aa71ec23fbd11e4b99dc8c4a86

Commands as the repository documents them: shown, never run by us. Our verdict covers commit f6a8a31bc1cc only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
GitHub CopilotMentioned in its text, not testedSkills for GitHub Copilot · About GitHub Copilot
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION C 79 / 100

    first audit · source f6a8a31bc1cc

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION CMODELSATLASCAUTION · C 
[![ModelsAtlas: CAUTION C](https://modelsatlas.com/skills/morluto/awesome-reverse-engineering/badge.svg)](https://modelsatlas.com/skills/morluto/awesome-reverse-engineering/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

All security skills →
awesome-agent-skills✓SAFE

VoltAgent/awesome-agent-skills

A curated collection of 1000+ agent skills from official dev teams and the community, compatible with Claude Code, Codex, Gemini CLI, Cursor, and more.

★ 36kGrade B
vibe-research-workflow✓SAFE

hkustdial/supervisor-skills

Guides AI-assisted research across three sub-flows, Vibe Coding, Vibe Figure, and Vibe Writing, with behavioural rules that keep the user in charge of academic judgment while delegating mechanical work to AI. Recommends…

★ 11kGrade B
tech-paper-template✓SAFE

hkustdial/supervisor-skills

Structures a technical paper's full logical skeleton using a thinking-template table (research background, limitations, key idea or goal, challenges, methodology modules, contributions), positions the paper as Technique…

★ 11kGrade B
pre-submission-reviewer✓SAFE

hkustdial/supervisor-skills

Runs a pre-submission review of a technical paper across five dimensions: macro logic, writing details, English grammar, LaTeX formatting, and figure quality. Uses a reviewer-style severity taxonomy (CRITICAL / MAJOR /…

★ 10kGrade B
intro-drafter✓SAFE

hkustdial/supervisor-skills

Drafts the Introduction prose for a technical paper, guided internally by a six-paragraph flowchart: background and running example, existing limitations, problem essence and goal, key challenges, solution overview,…

★ 10kGrade B
idea-evaluator✓SAFE

hkustdial/supervisor-skills

Evaluates a preliminary research idea against a five-dimension framework (Higher, Faster, Stronger, Cheaper, Broader) plus idea-lifecycle and student-capability matching, paradigm-shift probing, and a fatal-flaws audit.…

★ 10kGrade B

Add this badge to your README

[![ModelsAtlas: CAUTION C](https://modelsatlas.com/skills/morluto/awesome-reverse-engineering/badge.svg)](https://modelsatlas.com/skills/morluto/awesome-reverse-engineering/)

Questions about awesome-reverse-engineering

What does the awesome-reverse-engineering skill do?
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Is awesome-reverse-engineering safe to install?
With care. The audit graded it C (79/100) and found 15 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can awesome-reverse-engineering access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does awesome-reverse-engineering work with?
Its documentation mentions copilot. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (f6a8a31bc1cc), read on 2026-10-24. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.