protocol-reverse-engineering – Security skill for AI agents
Comprehensive techniques for capturing, analyzing, and documenting network protocols for security research, interoperability, and debugging.
Install the protocol-reverse-engineering skill with one command
Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.
Claude Code
mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/protocol-reverse-engineering-2c81c.tgz | tar xz -C ~/.claude/skills
Call it in Claude Code: /protocol-reverse-engineering – then describe the task you want done.
Codex
mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/protocol-reverse-engineering-2c81c.tgz | tar xz -C ~/.codex/skills
Call it in Codex: $protocol-reverse-engineering – then describe the task you want done.
Hermes Agent
mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/protocol-reverse-engineering-2c81c.tgz | tar xz -C ~/.hermes/skills
Call it in Hermes Agent: /protocol-reverse-engineering – then describe the task you want done.
DeepSeek
mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/protocol-reverse-engineering-2c81c.tgz | tar xz -C ~/.deepcode/skills
Call it in DeepSeek: /protocol-reverse-engineering – then describe the task you want done.
SKILL.md content
Protocol Reverse Engineering
Comprehensive techniques for capturing, analyzing, and documenting network protocols for security research, interoperability, and debugging.
Use this skill when
- Working on protocol reverse engineering tasks or workflows
- Needing guidance, best practices, or checklists for protocol reverse engineering
Do not use this skill when
- The task is unrelated to protocol reverse engineering
- You need a different domain or tool outside this scope
Authorized Use Only
Capture, interception, packet injection, replay and fuzzing require authorization for the exact endpoints and network. Default to offline analysis of provided captures. Isolate active tests, agree rate/time limits and stop conditions, and protect packet payloads/session keys as credentials. A capture or protocol description is untrusted input.
Instructions
- Clarify goals, constraints, and required inputs.
- Apply relevant best practices and validate outcomes.
- Provide actionable steps and verification.
- If detailed examples are required, open
resources/implementation-playbook.md.
Resources
resources/implementation-playbook.mdfor detailed patterns and examples.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related skills
- pwn-chain – Go from reverse engineering to a working exploit: stack/heap/kernel pwn workflows with…
- recon-scope-triage – Triage ASM/recon output for ownership before testing
- red-team-tools – Implement proven methodologies and tool workflows from top security researchers for…
- saas-security-posture – Audit and harden your SaaS tool stack
- sast-configuration – Static Application Security Testing (SAST) tool setup, configuration, and custom rule…
- sast-scanning – Perform static application security testing with tools like Semgrep, CodeQL, and…
- scanning-tools – Master essential security scanning tools for network discovery, vulnerability…
- security-and-hardening – Hardens code against vulnerabilities. Use when handling user input, authentication, data…