How zhaoxuya520/reverse-skill works
reverse-skill is a client-neutral cybersecurity skills router, with a separate Burp MCP adapter. The main workflow takes an analyst’s task through routing and scope readiness, into a scenario playbook and its tools, then into evidence, findings, reporting, and reusable journal material. The README documents this workflow and broad scenario coverage; sampled source confirms the Burp extension’s HTTP server and the stdio bridge. Most individual playbooks and case tooling were not sampled, so their internal calls are not shown.
Main entry points: skills Scenario playbooks · ctf-sandbox Case and scope · McpHttpServer.java Burp HTTP tools · RULES.md Task rules
Components 21
Task routing
- Task rules
RULES.md - Routing ladder
skills/MASTER-ROUTING.md
Scenario playbooks
- Scenario playbooks
skills - Mobile analysis
skills/mobile-reverse - Native reverse
skills/reverse-engineering - Web and API security
skills/api-security - Cloud and identity
skills/cloud-k8s - Forensics and malware
skills/digital-forensics
Tools and integrations
- Tool workflows
skills/pentest-tools - Tool discovery
skills/scripts - MCP integrations
plugins/reverse-skill/skills/reverse-skill-router
Case workflow
- Case and scope
skills/ctf-sandbox - Timeline and evidence
skills/ctf-sandbox - Finding consolidation
skills/scripts/consolidate_evidence.py - Case integrity review
skills/case-review/scripts/review_case.py - Report and journal
CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reporting.md
Burp MCP
- Burp extension
burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java - Burp HTTP tools
burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java - MCP stdio bridge
burp-mcp-full/mcp-bridge.js
Other components
- Analyst or agent
- Burp Suite
Connections 20
- Analyst or agent → Task rules: submits task
README.md - Task rules → Routing ladder: routes task
README.md - Routing ladder → Case and scope: starts case
README.md - Case and scope → Scenario playbooks: selects workflow
README.md - Scenario playbooks → Tool workflows: uses methods
README.md - Scenario playbooks → MCP integrations: uses integrations
README.md - Scenario playbooks → Mobile analysis: covers mobile
README.md - Scenario playbooks → Native reverse: covers native
README.md - Scenario playbooks → Web and API security: covers web
README.md - Scenario playbooks → Cloud and identity: covers cloud
README.md - Scenario playbooks → Forensics and malware: covers forensics
README.md - Case and scope → Timeline and evidence: records activity
README.md - Timeline and evidence → Report and journal: feeds reporting
README.md - Timeline and evidence → Finding consolidation: consolidates evidence
README.md - Case integrity review → Report and journal: reviews case
README.md - Burp Suite → Burp extension: loads extension
burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java - Burp extension → Burp HTTP tools: starts server
burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java - Burp HTTP tools → Burp Suite: uses Burp API
burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java - MCP integrations → MCP stdio bridge: may connect
- MCP stdio bridge → Burp HTTP tools: fetches and calls
burp-mcp-full/mcp-bridge.js