#skill

Use when the user asks you to do things on their own iPhone or Android phone (look up information, reply to messages, place orders, organize photos, move files). Operates through the Pinky desktop app and phone_* MCP tools, with the user approving key steps such as payments; never enters passwords or verification codes, and never bypasses any block. Use case: Let an Agent operate your phone while you watch and approve

A beginner's tutorial: the open-source PPT Master lets Claude Code and other AI tools generate genuinely editable PowerPoint files on your computer, with charts, tables, and shapes you can keep editing. Three steps to get started: install Python, download the project, and drop in your materials. Includes the confirmation workflow, export location, and things to watch out for.

Beginner tutorial: editonny is a free, open-source video editing skill. Transcription and rendering run on your own computer. Install it with one sentence, use plain language to trim pauses, remove slip-ups, add captions, switch to vertical format, and turn a passage into an animation. Includes how to read the settings card, default settings, and things to watch out for.

Someone has put together 10 reverse-engineering Skills and integration solutions for Agents: comprehensive analysis, scenario routing, Android interfaces, product analysis, lightweight command line, CTF, IDA assistance, JS signatures, and an all-in-one lab. We have added all of them to our site's Skill pages, with selection advice, license differences, and authorization reminders.

Use when a user wants to understand how an app, binary, or Electron program implements a feature and has no source code. Based on the open-source REA (MIT): connects analysis tools for native binaries, JavaScript/Electron, .NET, and websites via MCP. Analysis runs locally, and conclusions come with evidence and limitations. Only for your own targets or targets you are authorized to analyze. Use case: Have the agent work out how a feature of an app without source code is implemented, and provide evidence and limitations.

Use when a user hands over an APK, a binary, front-end encrypted JS, a CTF challenge or an authorized penetration-testing target, and is unsure which method and tools to use. Based on the open-source reverse-skill (MIT): routes to a suitable method, checks the local tools, confirms the authorized scope, then executes the workflow and produces a report. Use case: Have the agent first determine what kind of target it is, then choose the matching method, toolchain and report workflow.

Use when a user wants to decompile an APK, XAPK, JAR, or AAR, and extract an app's HTTP endpoints, authentication methods, and code structure. Built on the open-source android-reverse-engineering-skill (Apache-2.0): fingerprint first, then decompile with jadx and similar tools, with support for recovering Kotlin class names after R8 obfuscation. Only analyze apps you are authorized to analyze. Use case: Have an agent decompile an Android app and map the APIs it calls and its code structure.

Use when a user wants to study an existing product's features and flows and build their own version (architecture, build, testing, branding, launch). Based on the open-source replica-skill (MIT), a set of 11 Skills; only borrows features and flows, and does not copy the other party's code, logos, copy, or content. Analysis uses only public information and the user's own accounts. Use case: Have an agent analyze a product's features and flows, then build your own differentiated version step by step.

Use when a user wants to reverse-engineer Electron, native binaries, Go, APK, WASM, firmware or websites with command-line tools already installed locally, without installing an MCP server. Based on the open-source leanrea (MIT): tells the Agent the fastest command and common pitfalls for each type of target, and conclusions must be labeled as seen or inferred. Use case: Let the Agent call local reverse-engineering command-line tools directly, skipping MCP and complex configuration.

Use when working on CTF competitions or practice challenges (Web, binary exploitation, cryptography, reverse engineering, forensics, OSINT, etc.). Based on the open-source ctf-skills (MIT): a set of Skills split by challenge type, with tool installation scripts. For competitions, practice ranges, and authorized testing only. Use case: Lets the agent pull the matching solving approach and tools for each challenge type, so CTF work goes faster.

Use when a user has already exported decompilation results from IDA and wants an agent to name function symbols, recover data structures, generate Frida or Unicorn scripts, or write IDAPython. Based on the open-source reverse-skills, with 8 skills in total; unpacking and shelling are only for apps you own or are authorized to analyze. Use case: Have the agent work from IDA decompilation output to name symbols, recover structures, and generate dynamic instrumentation scripts.

Use when a user needs to analyze frontend signatures, encrypted parameters, dynamic cookies, obfuscated JS or WASM, or when API collection keeps failing. Based on the open-source hello_js_reverse_skill (the repository does not declare a license): draw conclusions through controlled experiments and layered evidence, and only work on your own targets or targets you are authorized to test. Do not bypass paywalls, login protection, or CAPTCHAs. Use case: Have the Agent locate the origin of frontend signatures and cookies through controlled experiments, and reach conclusions backed by evidence.

Use when a user wants a ready-to-run reverse engineering workspace: analyzing samples with tools like Ghidra and Frida, doing CTF work, and producing evidence reports. Based on the open-source Open-ReverseLab (GPL-3.0): 180+ knowledge base articles plus 100+ MCP tools, with tools installed by board. Only for your own samples, lab targets, and authorized testing. Use case: Let an agent analyze samples and produce evidence reports in one workspace, using the knowledge base and over a hundred tools.

Use when a user needs to locate front-end encryption functions (login passwords, request signing, response decryption) and wants the results turned into reusable JSRPC, a Flask service and Burp autoDecoder configuration. Based on the open-source js-reverse-automation--skill (Apache-2.0), connecting to a real browser via chrome-devtools-mcp. Only for your own targets or targets you are authorized to test; shut down the services when done. Use case: Let the agent find front-end encryption entry points in a real browser and deliver callable services and Burp configuration.

Use when a user wants an agent to start a GPU or TPU on Google Colab, run code, deploy or fine-tune open-source models, fetch results, and release the machine. Combines the official google-colab-cli (Apache-2.0) and the Colab remote MCP into one workflow: the CLI handles file transfer, SSH, Drive, and one-off jobs, while MCP handles lightweight start/stop from a chat client. Enforces releasing runtimes after use, asking before expensive GPUs, and never paying on the user's behalf. Use case: Let an agent start a GPU on Colab for you, run open-source models, fetch the results, and shut down automatically. Use the CLI from a local terminal, or the remote MCP from a chat client.

Turn a 5-second talking-head line into a halftone paper-collage assembly animation: design the visual metaphor first, and leave the paid video generation to the end behind three checkpoints. Includes prerequisites, step-by-step instructions and FAQ.

Use when a user wants to turn a roughly 5-second spoken script line, an opinion, or an abstract concept into a paper collage animation with matching visuals. Based on the open-source gbro-collage-broll (MIT): enforces three confirmation gates, and only confirmed items go into video generation; the output is vertical, 5 seconds, and silent; video is billed per use to the user's own Gemini key. Use case: Have the agent turn a spoken line into a halftone paper-collage assembly animation B-roll: it proposes a metaphor first, then a still frame, and finally generates the video, with your confirmation at every step.

Group 12 open-source Skills into four sets by use (video, motion, Blender, web 3D), get three combinations you can run right away, and understand the pitfalls around licenses, paid features, and copyright.

A double-click-to-open HTML renovation designer: the floor plan is restored, editable in 2D and 3D, includes furniture and plumbing/electrical, and can export construction drawings and CAD files.

Use when the user provides a floor plan, CAD screenshot, vector PDF or DXF and wants it rebuilt as an editable 2D/3D interior design studio webpage, or needs plumbing and electrical routing and an interior design scheme. Based on the open-source house-plan-designer (MIT): positions by dimension annotations, reconciles before delivering, and marks inferred load-bearing walls as pending confirmation. Use case: Have the agent rebuild a floor plan or CAD drawing as a 2D/3D interior design studio that can be edited in the browser, with furniture and plumbing and electrical layouts placed automatically.