PowerShell Scripts for Core Reverse-Skill Functions: Complete Directory Guide

The reverse-skill repository provides 15+ PowerShell scripts in skills/scripts that handle routing, case management, tool discovery, verification, and skill-specific automation.

All core functionality in the zhaoxuya520/reverse-skill framework is implemented through modular PowerShell (*.ps1) scripts located under skills/scripts. These scripts form the execution backbone that transforms natural language hints into structured reverse-engineering workflows. This guide maps every available script to its purpose with exact file paths and runnable commands.

Routing and Orchestration Scripts

The routing layer interprets user hints, consults configuration, and dispatches to appropriate skills.

master-route.ps1

The primary entry point at skills/scripts/master-route.ps1 loads the tool index, reads skills/config/routing.json, and routes the request to the matching skill handler.

powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/master-route.ps1 -Hint "android apk reverse"

refresh-tool-index.ps1

Located at skills/scripts/refresh-tool-index.ps1, this script scans the repository to regenerate skills/tool-index.md automatically.

powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/refresh-tool-index.ps1

verify-routing-coherence.ps1

The skills/scripts/verify-routing-coherence.ps1 script ensures synchronization between routing JSON, tool index, and markdown summaries.

powershell -File skills/scripts/verify-routing-coherence.ps1

test-routing.ps1

Houses 162 regression test cases for routing logic at skills/scripts/test-routing.ps1.

powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1

smoke.ps1

Fast sanity check combining verification with minimal routing execution at skills/scripts/smoke.ps1.

powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/smoke.ps1

Case Lifecycle Management Scripts

These scripts enforce structured case handling with security gates and evidence tracking.

case-init.ps1

Creates new case folders at work/<case>/ and generates scope.md at skills/scripts/case-init.ps1.

powershell -File skills/scripts/case-init.ps1 -Hint "collect network traffic"

case-guard.ps1

Enforces the hard security gate requiring auth.status=granted plus network profile validation at skills/scripts/case-guard.ps1.

append-evidence.ps1

Appends artifact information to work/<case>/evidence.md at skills/scripts/append-evidence.ps1.

powershell -File skills/scripts/append-evidence.ps1 -CaseId "case-001" -Path "work/case-001/artifacts/trace.pcap" -Description "Captured network trace"

Tool Discovery and Helper Libraries

Reusable modules in skills/scripts/lib/ provide core infrastructure.

ToolDiscovery.ps1

skills/scripts/lib/ToolDiscovery.ps1 discovers skill scripts and builds the internal tool catalog used by the routing engine.

WorkRoot.ps1

skills/scripts/lib/WorkRoot.ps1 resolves repository root paths and case directory structures for cross-script consistency.

Verification and Quality Assurance Scripts

Automated checks maintain documentation accuracy and security hygiene.

Script	Location	Purpose
verify-doc-facts.ps1	skills/scripts/verify-doc-facts.ps1	Validates documentation against actual code
test-workflow-title-safety.ps1	skills/scripts/test-workflow-title-safety.ps1	Detects unsafe characters in workflow titles
test-p0-friction.ps1	skills/scripts/test-p0-friction.ps1	Runs friction-reduction tests for core commands
scan-leaks.ps1	skills/scripts/scan-leaks.ps1	Scans repository for potential secret exposure

Skill-Specific Wrapper Scripts

Specialized scripts extend PowerShell coverage into domain-specific reverse-engineering tools.

Radare2 Integration

• radare2/scripts/recon.ps1 — Thin wrapper for Radare2 binary reconnaissance operations

IDA Pro Integration

• ida-reverse/scripts/start.ps1 — Launches IDA Pro with environment configuration
• ida-reverse/scripts/open.ps1 — Opens existing IDA project files

Browser Automation

• browser-automation/scripts/setup.ps1 — Configures Selenium-based browser automation environment

Android APK Reverse-Engineering

The apk-reverse/scripts/ directory contains the most extensive skill-specific toolkit:

Script	Purpose
rebuild-sign-install.ps1	Rebuilds, signs, and installs modified APKs
manifest-summary.ps1	Extracts and summarizes AndroidManifest.xml
frida-run.ps1	Executes Frida scripts against target applications
decode.ps1	Decompiles APK resources and dex files

Execution Security Model

All scripts are designed for execution with -NoProfile -ExecutionPolicy Bypass as documented in AGENTS.md. This eliminates PowerShell profile interference while allowing the framework's unsigned scripts to run in restricted environments.

Summary

• 15+ PowerShell scripts implement all core reverse-skill functions in the zhaoxuya520/reverse-skill repository
• Routing engine (master-route.ps1) serves as the primary entry point with JSON-based configuration
• Case management follows strict lifecycle: initialization (case-init.ps1), security validation (case-guard.ps1), and evidence tracking (append-evidence.ps1)
• Quality automation includes 162 routing regression tests, documentation verification, and leak scanning
• Skill wrappers translate PowerShell invocations into specialized tools: Radare2, IDA Pro, Selenium, and APK toolchains
• Library modules (ToolDiscovery.ps1, WorkRoot.ps1) provide shared infrastructure for path resolution and tool cataloging

Frequently Asked Questions

Where are the core PowerShell scripts located in reverse-skill?

All core scripts reside in skills/scripts/ with supporting libraries in skills/scripts/lib/. Skill-specific wrappers follow the pattern skills/<skill-name>/scripts/*.ps1.

How do I execute a routing request with the correct PowerShell flags?

Use -NoProfile -ExecutionPolicy Bypass for all framework scripts: powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/master-route.ps1 -Hint "<your-hint>". This matches the security model defined in AGENTS.md.

What validation exists to ensure routing configuration remains accurate?

Three scripts maintain coherence: refresh-tool-index.ps1 rebuilds the tool catalog, verify-routing-coherence.ps1 checks JSON/index alignment, and test-routing.ps1 runs 162 regression cases against routing logic.

Which script should I use to start a new reverse-engineering case?

Run case-init.ps1 with your hint: powershell -File skills/scripts/case-init.ps1 -Hint "analyze suspicious binary". This creates work/<case>/ with scope.md ready for the security gate enforced by case-guard.ps1.

{
  "mcpServers": {
    "instagit": {
      "command": "npx",
      "args": ["-y", "instagit@latest"]
    }
  }
}