reverse-engineering
Reverse Engineering
A triage-first method for taking apart software you're allowed to study, built for an agent working headless through a shell: identify the target, pick tools that are actually installed, export what you need to files, read it in slices, and back every claim with an address, offset, or captured request.
Paths. ${CLAUDE_SKILL_DIR} is the folder containing this SKILL.md (written
<skill-dir> in the reference files). Claude Code replaces it with the real path
automatically. On any other agent (Codex, Cursor, Gemini CLI, Copilot, OpenCode…)
replace it yourself with the absolute path of the directory you loaded this file
from — don't leave it as a shell variable, which would expand to nothing. Paths
like scripts/triage.py and references/android.md are relative to that folder.
Commands say python; use python3 where that's the interpreter's name.