Automate reverse engineering tool selection and execution flow for AI coding assistants
When analyzing APK files or binaries, you no longer need to decide which tool to run first. This repository allows an AI agent to identify the task type and automatically find and execute the necessary tools and scripts. It is a routing system that converts complex security analysis tasks into repeatable workflows.
Automatic routing to resolve tool selection confusion
In security research or reverse engineering, choosing the right tool from among many, such as jadx, Frida, and IDA Pro, is a significant barrier. This package selects the appropriate technical module based on the nature of the task, using 44 routing rules. Instead of having the AI agent guess commands, it guides it to follow verified workflows. This prevents repeating the same mistakes and allows for the reproduction of experience-based analysis processes.
Supported analysis scenarios and scope
This repository includes more than 45 technical modules covering various security analysis areas.
- Mobile app analysis Provides dedicated skills for reverse engineering APK and iOS mobile apps.
- Binary and frontend Supports analysis of
exe,dll,so, andelffiles, as well as frontend JS encryption parameters. - Penetration testing and CTF Includes penetration testing tools, attack chain orchestration, and a CTF sandbox orchestrator with 42 sub-skills.
- Specialized security fields Covers specialized areas such as firmware, IoT, supply chain security, LLM/AI security, and EDR bypass.
Installation environment and client integration
This package is verified via CI on Windows and Ubuntu and has a neutral structure that is not dependent on specific AI clients. It can integrate with various AI coding clients such as Claude Code, Cursor, Cline, and Kiro. Before installation, a Java/JDK, Node.js 22.12 or higher, and Python 3.x environment are required. After cloning the repository, you must run the script corresponding to your platform to update the local tool index.
Legal and technical constraints to check before use
This project is designed for legal security research, education, CTF competitions, or system testing with explicit authorization. Unauthorized access or scanning, and misuse, are strictly prohibited, and users bear full responsibility for legal compliance. The license is based on MIT, but some submodules follow GPLv3 or AGPL-3.0, so you must check for license conflicts when using it commercially. Additionally, this tool does not guarantee the accuracy of analysis, and all results must be interpreted at the user's discretion.
