# PowerShell Scripts for Core Reverse-Skill Functions: Complete Directory Guide

> Discover 15+ PowerShell scripts for core reverse-skill functions including routing, case management, tool discovery, and automation. Explore the zhaoxuya520/reverse-skill repository today.

- Repository: [ZhaoXu/reverse-skill](https://github.com/zhaoxuya520/reverse-skill)
- Tags: how-to-guide
- Published: 2026-08-10

---

**The reverse-skill repository provides 15+ PowerShell scripts in `skills/scripts` that handle routing, case management, tool discovery, verification, and skill-specific automation.**

All core functionality in the zhaoxuya520/reverse-skill framework is implemented through modular PowerShell (`*.ps1`) scripts located under `skills/scripts`. These scripts form the execution backbone that transforms natural language hints into structured reverse-engineering workflows. This guide maps every available script to its purpose with exact file paths and runnable commands.

## Routing and Orchestration Scripts

The routing layer interprets user hints, consults configuration, and dispatches to appropriate skills.

### master-route.ps1

The primary entry point at `skills/scripts/master-route.ps1` loads the tool index, reads [`skills/config/routing.json`](https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/config/routing.json), and routes the request to the matching skill handler.

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/master-route.ps1 -Hint "android apk reverse"

```

### refresh-tool-index.ps1

Located at `skills/scripts/refresh-tool-index.ps1`, this script scans the repository to regenerate [`skills/tool-index.md`](https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/tool-index.md) automatically.

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/refresh-tool-index.ps1

```

### verify-routing-coherence.ps1

The `skills/scripts/verify-routing-coherence.ps1` script ensures synchronization between routing JSON, tool index, and markdown summaries.

```powershell
powershell -File skills/scripts/verify-routing-coherence.ps1

```

### test-routing.ps1

Houses 162 regression test cases for routing logic at `skills/scripts/test-routing.ps1`.

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1

```

### smoke.ps1

Fast sanity check combining verification with minimal routing execution at `skills/scripts/smoke.ps1`.

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/smoke.ps1

```

## Case Lifecycle Management Scripts

These scripts enforce structured case handling with security gates and evidence tracking.

### case-init.ps1

Creates new case folders at `work/<case>/` and generates [`scope.md`](https://github.com/zhaoxuya520/reverse-skill/blob/main/scope.md) at `skills/scripts/case-init.ps1`.

```powershell
powershell -File skills/scripts/case-init.ps1 -Hint "collect network traffic"

```

### case-guard.ps1

Enforces the hard security gate requiring `auth.status=granted` plus network profile validation at `skills/scripts/case-guard.ps1`.

### append-evidence.ps1

Appends artifact information to `work/<case>/evidence.md` at `skills/scripts/append-evidence.ps1`.

```powershell
powershell -File skills/scripts/append-evidence.ps1 -CaseId "case-001" -Path "work/case-001/artifacts/trace.pcap" -Description "Captured network trace"

```

## Tool Discovery and Helper Libraries

Reusable modules in `skills/scripts/lib/` provide core infrastructure.

### ToolDiscovery.ps1

`skills/scripts/lib/ToolDiscovery.ps1` discovers skill scripts and builds the internal tool catalog used by the routing engine.

### WorkRoot.ps1

`skills/scripts/lib/WorkRoot.ps1` resolves repository root paths and case directory structures for cross-script consistency.

## Verification and Quality Assurance Scripts

Automated checks maintain documentation accuracy and security hygiene.

| Script | Location | Purpose |
|--------|----------|---------|
| **verify-doc-facts.ps1** | `skills/scripts/verify-doc-facts.ps1` | Validates documentation against actual code |
| **test-workflow-title-safety.ps1** | `skills/scripts/test-workflow-title-safety.ps1` | Detects unsafe characters in workflow titles |
| **test-p0-friction.ps1** | `skills/scripts/test-p0-friction.ps1` | Runs friction-reduction tests for core commands |
| **scan-leaks.ps1** | `skills/scripts/scan-leaks.ps1` | Scans repository for potential secret exposure |

## Skill-Specific Wrapper Scripts

Specialized scripts extend PowerShell coverage into domain-specific reverse-engineering tools.

### Radare2 Integration

- **`radare2/scripts/recon.ps1`** — Thin wrapper for Radare2 binary reconnaissance operations

### IDA Pro Integration

- **`ida-reverse/scripts/start.ps1`** — Launches IDA Pro with environment configuration
- **`ida-reverse/scripts/open.ps1`** — Opens existing IDA project files

### Browser Automation

- **`browser-automation/scripts/setup.ps1`** — Configures Selenium-based browser automation environment

### Android APK Reverse-Engineering

The `apk-reverse/scripts/` directory contains the most extensive skill-specific toolkit:

| Script | Purpose |
|--------|---------|
| **`rebuild-sign-install.ps1`** | Rebuilds, signs, and installs modified APKs |
| **`manifest-summary.ps1`** | Extracts and summarizes AndroidManifest.xml |
| **`frida-run.ps1`** | Executes Frida scripts against target applications |
| **`decode.ps1`** | Decompiles APK resources and dex files |

## Execution Security Model

All scripts are designed for execution with `-NoProfile -ExecutionPolicy Bypass` as documented in [`AGENTS.md`](https://github.com/zhaoxuya520/reverse-skill/blob/main/AGENTS.md). This eliminates PowerShell profile interference while allowing the framework's unsigned scripts to run in restricted environments.

## Summary

- **15+ PowerShell scripts** implement all core reverse-skill functions in the zhaoxuya520/reverse-skill repository
- **Routing engine** (`master-route.ps1`) serves as the primary entry point with JSON-based configuration
- **Case management** follows strict lifecycle: initialization (`case-init.ps1`), security validation (`case-guard.ps1`), and evidence tracking (`append-evidence.ps1`)
- **Quality automation** includes 162 routing regression tests, documentation verification, and leak scanning
- **Skill wrappers** translate PowerShell invocations into specialized tools: Radare2, IDA Pro, Selenium, and APK toolchains
- **Library modules** (`ToolDiscovery.ps1`, `WorkRoot.ps1`) provide shared infrastructure for path resolution and tool cataloging

## Frequently Asked Questions

### Where are the core PowerShell scripts located in reverse-skill?

All core scripts reside in `skills/scripts/` with supporting libraries in `skills/scripts/lib/`. Skill-specific wrappers follow the pattern `skills/<skill-name>/scripts/*.ps1`.

### How do I execute a routing request with the correct PowerShell flags?

Use `-NoProfile -ExecutionPolicy Bypass` for all framework scripts: `powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/master-route.ps1 -Hint "<your-hint>"`. This matches the security model defined in [`AGENTS.md`](https://github.com/zhaoxuya520/reverse-skill/blob/main/AGENTS.md).

### What validation exists to ensure routing configuration remains accurate?

Three scripts maintain coherence: `refresh-tool-index.ps1` rebuilds the tool catalog, `verify-routing-coherence.ps1` checks JSON/index alignment, and `test-routing.ps1` runs 162 regression cases against routing logic.

### Which script should I use to start a new reverse-engineering case?

Run `case-init.ps1` with your hint: `powershell -File skills/scripts/case-init.ps1 -Hint "analyze suspicious binary"`. This creates `work/<case>/` with [`scope.md`](https://github.com/zhaoxuya520/reverse-skill/blob/main/scope.md) ready for the security gate enforced by `case-guard.ps1`.