How Kali Linux Integrates with reverse-skill: Complete Setup Guide

Kali Linux integrates with reverse-skill through a dedicated kali/ subdirectory that provides Bash-based tooling, apt-driven package management, and platform-specific MCP services while sharing the platform-agnostic core defined in skills/.

The reverse-skill repository by zhaoxuya520 provides a cross-platform framework for reverse engineering and penetration testing automation. While the core skill definitions and routing logic remain platform-agnostic under the skills/ directory, Kali Linux receives a specialized adaptation layer. This integration ensures that security professionals can leverage Kali's native package ecosystem and toolset without modifying the shared intelligence that drives skill execution across Windows, macOS, and Linux environments.

Shared Core Architecture

The foundation of reverse-skill integration resides in the skills/ directory, which houses platform-neutral components used by all operating systems.

In skills/MASTER-ROUTING.md, the central routing logic determines which skill to invoke based on the task context. This file is identical across Windows, macOS, Linux, and Kali installations. The skill definitions themselves—stored as *.md files—and operational scripts under skills/scripts/ ensure consistent behavior regardless of the underlying OS.

The core maintains logical capability names such as jadx, apktool, and frida. These abstractions allow the AI client to request actions without knowing platform-specific binary paths, while the Kali integration layer translates these requests into concrete Kali Linux commands.

Kali-Specific Integration Layer

The kali/ directory extends the shared core with Linux-native implementations that replace PowerShell equivalents found in the Windows version.

Bootstrap and Installation Scripts

Three primary Bash scripts handle Kali Linux integration:

• kali/scripts/quick-setup.sh: Automates system updates, dependency installation, and initial MCP configuration. Run with sudo bash kali/scripts/quick-setup.sh for full setup, or add --minimal to exclude Active Directory and internal network tools.
• kali/scripts/bootstrap-reverse.sh: Installs Kali-native MCP services and additional utilities via apt. This script references kali/scripts/bootstrap-manifest.json to map tool identifiers to their corresponding apt package names.
• kali/scripts/refresh-tool-index.sh: Scans the host for installed binaries and updates skills/tool-index.md, enabling the AI router to discover available capabilities dynamically.

For example, to install the official MCP packages for Kali integration:

bash kali/scripts/bootstrap-reverse.sh mcp-kali-server metasploitmcp hexstrike-ai

Rule Injection and AI Routing

Before any skill executes, the framework reads kali/RULES-kali.md to inject Kali-specific tool-discovery logic. This file contains platform-level directives that inform the AI client how to locate binaries in standard Kali paths such as /opt/, ~/tools/, and /usr/bin/.

Unlike the generic Linux rules, this document accounts for Kali's specialized penetration-testing distribution characteristics, ensuring that tools like sqlmap, nmap, and burpsuite are correctly identified in their distribution-specific locations.

Tool Discovery and Indexing

The refresh-tool-index.sh script performs runtime environment analysis by:

1. Scanning $PATH and common Kali directories for reverse engineering binaries
2. Verifying executable permissions and version compatibility
3. Writing structured metadata to skills/tool-index.md

This auto-generated index allows the routing logic in skills/MASTER-ROUTING.md to select appropriate tools without hardcoding paths, ensuring that custom-compiled tools in /opt/ are recognized alongside standard apt packages.

Practical Setup Examples

Full system preparation with OS updates:

sudo bash kali/scripts/quick-setup.sh

Skip OS updates for faster setup on slow connections:

sudo bash kali/scripts/quick-setup.sh --skip-update

Install additional 2026.1 tools beyond the base MCP services:

bash kali/scripts/bootstrap-reverse.sh adaptixc2 atomic-operator sstimap xsstrike wpprobe fluxion gef

Update the tool index after manual package installation:

bash kali/scripts/refresh-tool-index.sh
cat skills/tool-index.md

Key Files and Path Conventions

Understanding the file structure clarifies how reverse-skill maintains cross-platform parity while accommodating Kali specifics:

File	Purpose
skills/MASTER-ROUTING.md	Core routing logic invoked by all platforms
kali/RULES-kali.md	Platform-specific AI routing rules for Kali
kali/scripts/bootstrap-reverse.sh	MCP service installer using apt
kali/scripts/bootstrap-manifest.json	Mapping of tool IDs to apt package names
kali/scripts/quick-setup.sh	Automated environment preparation
kali/scripts/refresh-tool-index.sh	Binary discovery and index generation
skills/tool-index.md	Auto-generated inventory of available tools
CTF-Sandbox-Orchestrator/	Shared CTF skill definitions used across platforms

Kali follows Linux-style path conventions (/opt/, /usr/bin/) while the core references logical capability names. The verification checklist in kali/README-kali.md confirms that both core and Kali-specific tools are functional before any penetration-testing task begins.

Summary

• Platform-Agnostic Core: All skill definitions and routing logic in skills/ are shared across Windows, macOS, Linux, and Kali, ensuring consistent AI behavior.
• Kali Adaptation Layer: The kali/ directory provides Bash-based entry points that replace PowerShell scripts, handling apt package management and native MCP services.
• Dynamic Tool Discovery: refresh-tool-index.sh maintains skills/tool-index.md automatically, mapping logical skill names to Kali's binary locations.
• Rule-Based Injection: kali/RULES-kali.md configures the AI client with Kali-specific paths and capabilities before execution.
• Verification Workflow: The built-in checklist in kali/README-kali.md validates that both the core framework and Kali-native tools are operational.

Frequently Asked Questions

Does reverse-skill replace any existing Kali Linux tools?

No, reverse-skill does not replace existing tools. According to the repository structure, it adds a lightweight adaptation layer that maps the platform-agnostic skill router to Kali's existing toolset. The framework references standard binaries like nmap and metasploit through logical names while preserving their native installations in /usr/bin/ and /opt/.

How does the AI client know which Kali tools are installed?

The AI client reads skills/tool-index.md, which is automatically generated by kali/scripts/refresh-tool-index.sh. This script scans the host for installed binaries, updates the index with available tools and their paths, and enables the routing logic to select appropriate binaries during skill execution.

Can I use reverse-skill on Kali without internet access?

Partially. The quick-setup.sh script supports a --skip-update flag to bypass OS updates, but the initial installation of MCP services via bootstrap-reverse.sh requires internet access to download packages via apt. Once installed, the core skills function offline using locally indexed tools.

What MCP services are specific to Kali Linux integration?

The bootstrap script installs three primary Kali-native MCP services: mcp-kali-server for general platform integration, metasploitmcp for Metasploit framework communication, and hexstrike-ai for binary analysis tasks. These services are defined in kali/scripts/bootstrap-manifest.json and installed through the standard apt package manager.

{
  "mcpServers": {
    "instagit": {
      "command": "npx",
      "args": ["-y", "instagit@latest"]
    }
  }
}