# zhaoxuya520/reverse-skill architecture

> Architecture diagram of the GitHub repository zhaoxuya520/reverse-skill, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-10-05). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/zhaoxuya520/reverse-skill
- Repository: https://github.com/zhaoxuya520/reverse-skill

## Overview

reverse-skill is a client-neutral cybersecurity skills router, with a separate Burp MCP adapter. The main workflow takes an analyst’s task through routing and scope readiness, into a scenario playbook and its tools, then into evidence, findings, reporting, and reusable journal material. The README documents this workflow and broad scenario coverage; sampled source confirms the Burp extension’s HTTP server and the stdio bridge. Most individual playbooks and case tooling were not sampled, so their internal calls are not shown.

Main entry points: [`skills`](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills) (Scenario playbooks), [`skills/ctf-sandbox`](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/ctf-sandbox) (Case and scope), [`burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java`](https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java) (Burp HTTP tools), [`RULES.md`](https://github.com/zhaoxuya520/reverse-skill/blob/main/RULES.md) (Task rules)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_routing["Task routing"]
  node_rules["Task rules<br/>[RULES.md]"]
  node_router["Routing ladder<br/>[MASTER-ROUTING.md]"]
end

subgraph group_playbooks["Scenario playbooks"]
  node_scenario["Scenario playbooks"]
  node_mobile["Mobile analysis"]
  node_native["Native reverse"]
  node_web_api["Web and API security"]
  node_cloud_identity["Cloud and identity"]
  node_forensics["Forensics and malware"]
end

subgraph group_execution["Tools and integrations"]
  node_tools["Tool workflows"]
  node_tool_discovery["Tool discovery"]
  node_mcp["MCP integrations"]
end

subgraph group_casework["Case workflow"]
  node_case_init["Case and scope"]
  node_timeline["Timeline and evidence"]
  node_consolidate["Finding consolidation"]
  node_case_review["Case integrity review<br/>[review_case.py]"]
  node_report["Report and journal<br/>[reporting.md]"]
end

subgraph group_burp["Burp MCP"]
  node_burp_extension["Burp extension"]
  node_burp_server["Burp HTTP tools<br/>[McpHttpServer.java]"]
  node_burp_bridge["MCP stdio bridge<br/>[mcp-bridge.js]"]
end

node_analyst(("Analyst or agent"))
node_burp(("Burp Suite"))

node_analyst -->|"submits task"| node_rules
node_rules -->|"routes task"| node_router
node_router -->|"starts case"| node_case_init
node_case_init -->|"selects workflow"| node_scenario
node_scenario -->|"uses methods"| node_tools
node_scenario -->|"uses integrations"| node_mcp
node_scenario -.->|"covers mobile"| node_mobile
node_scenario -.->|"covers native"| node_native
node_scenario -.->|"covers web"| node_web_api
node_scenario -.->|"covers cloud"| node_cloud_identity
node_scenario -.->|"covers forensics"| node_forensics
node_case_init -->|"records activity"| node_timeline
node_timeline -->|"feeds reporting"| node_report
node_timeline -.->|"consolidates evidence"| node_consolidate
node_case_review -.->|"reviews case"| node_report
node_burp -->|"loads extension"| node_burp_extension
node_burp_extension -->|"starts server"| node_burp_server
node_burp_server -->|"uses Burp API"| node_burp
node_mcp -.->|"may connect"| node_burp_bridge
node_burp_bridge -->|"fetches and calls"| node_burp_server

click node_rules "https://github.com/zhaoxuya520/reverse-skill/blob/main/RULES.md"
click node_router "https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/MASTER-ROUTING.md"
click node_case_init "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/ctf-sandbox"
click node_scenario "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills"
click node_mobile "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/mobile-reverse"
click node_native "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/reverse-engineering"
click node_web_api "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/api-security"
click node_cloud_identity "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/cloud-k8s"
click node_forensics "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/digital-forensics"
click node_tools "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/pentest-tools"
click node_tool_discovery "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/scripts"
click node_mcp "https://github.com/zhaoxuya520/reverse-skill/tree/main/plugins/reverse-skill/skills/reverse-skill-router"
click node_timeline "https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/ctf-sandbox"
click node_consolidate "https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/scripts/consolidate_evidence.py"
click node_case_review "https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/case-review/scripts/review_case.py"
click node_report "https://github.com/zhaoxuya520/reverse-skill/blob/main/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reporting.md"
click node_burp_extension "https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java"
click node_burp_server "https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java"
click node_burp_bridge "https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/mcp-bridge.js"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_rules,node_router toneBlue
class node_scenario,node_mobile,node_native,node_web_api,node_cloud_identity,node_forensics toneAmber
class node_tools,node_tool_discovery,node_mcp toneMint
class node_case_init,node_timeline,node_consolidate,node_case_review,node_report toneRose
class node_burp_extension,node_burp_server,node_burp_bridge,node_analyst,node_burp toneIndigo
```

## Components

### Task routing

- [Task rules](https://github.com/zhaoxuya520/reverse-skill/blob/main/RULES.md): `RULES.md`
- [Routing ladder](https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/MASTER-ROUTING.md): `skills/MASTER-ROUTING.md`

### Scenario playbooks

- [Scenario playbooks](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills): `skills`
- [Mobile analysis](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/mobile-reverse): `skills/mobile-reverse`
- [Native reverse](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/reverse-engineering): `skills/reverse-engineering`
- [Web and API security](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/api-security): `skills/api-security`
- [Cloud and identity](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/cloud-k8s): `skills/cloud-k8s`
- [Forensics and malware](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/digital-forensics): `skills/digital-forensics`

### Tools and integrations

- [Tool workflows](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/pentest-tools): `skills/pentest-tools`
- [Tool discovery](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/scripts): `skills/scripts`
- [MCP integrations](https://github.com/zhaoxuya520/reverse-skill/tree/main/plugins/reverse-skill/skills/reverse-skill-router): `plugins/reverse-skill/skills/reverse-skill-router`

### Case workflow

- [Case and scope](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/ctf-sandbox): `skills/ctf-sandbox`
- [Timeline and evidence](https://github.com/zhaoxuya520/reverse-skill/tree/main/skills/ctf-sandbox): `skills/ctf-sandbox`
- [Finding consolidation](https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/scripts/consolidate_evidence.py): `skills/scripts/consolidate_evidence.py`
- [Case integrity review](https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/case-review/scripts/review_case.py): `skills/case-review/scripts/review_case.py`
- [Report and journal](https://github.com/zhaoxuya520/reverse-skill/blob/main/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reporting.md): `CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reporting.md`

### Burp MCP

- [Burp extension](https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java): `burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java`
- [Burp HTTP tools](https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java): `burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java`
- [MCP stdio bridge](https://github.com/zhaoxuya520/reverse-skill/blob/main/burp-mcp-full/mcp-bridge.js): `burp-mcp-full/mcp-bridge.js`

### Other components

- **Analyst or agent**
- **Burp Suite**

## Connections

- Analyst or agent → Task rules: submits task (evidence: `README.md`)
- Task rules → Routing ladder: routes task (evidence: `README.md`)
- Routing ladder → Case and scope: starts case (evidence: `README.md`)
- Case and scope → Scenario playbooks: selects workflow (evidence: `README.md`)
- Scenario playbooks → Tool workflows: uses methods (evidence: `README.md`)
- Scenario playbooks → MCP integrations: uses integrations (evidence: `README.md`)
- Scenario playbooks → Mobile analysis: covers mobile (evidence: `README.md`)
- Scenario playbooks → Native reverse: covers native (evidence: `README.md`)
- Scenario playbooks → Web and API security: covers web (evidence: `README.md`)
- Scenario playbooks → Cloud and identity: covers cloud (evidence: `README.md`)
- Scenario playbooks → Forensics and malware: covers forensics (evidence: `README.md`)
- Case and scope → Timeline and evidence: records activity (evidence: `README.md`)
- Timeline and evidence → Report and journal: feeds reporting (evidence: `README.md`)
- Timeline and evidence → Finding consolidation: consolidates evidence (evidence: `README.md`)
- Case integrity review → Report and journal: reviews case (evidence: `README.md`)
- Burp Suite → Burp extension: loads extension (evidence: `burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java`)
- Burp extension → Burp HTTP tools: starts server (evidence: `burp-mcp-full/src/main/java/com/burpmcp/BurpMcpExtension.java`)
- Burp HTTP tools → Burp Suite: uses Burp API (evidence: `burp-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java`)
- MCP integrations → MCP stdio bridge: may connect
- MCP stdio bridge → Burp HTTP tools: fetches and calls (evidence: `burp-mcp-full/mcp-bridge.js`)