Reverse Engineering Skill for Beginners

This skill helps you analyze unknown binaries, executables, malware samples, firmware images, and obfuscated code step by step. It assumes you are a beginner and prioritizes safety, clarity, and repeatable workflows.

When to use this skill

• The user drops a suspicious file, binary, or executable and asks "what does this do?"
• The user wants to understand how a program works without source code.
• The user mentions disassembly, decompilation, debugging, malware, firmware, obfuscation, or unpacking.
• The user needs help choosing tools or interpreting output from reverse engineering utilities.

Quick start: run the triage script first

On any unknown file, start with the bundled triage script (read-only, pure Python, no dependencies):

python "${CLAUDE_SKILL_DIR}/scripts/triage.py" <sample>