reverse-operator-attribution
Use this skill when reverse-engineering, sandbox, or threat-intel evidence exposes build paths, usernames, typo fingerprints, version windows, cloud relays…
Skill by knowlet
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/knowlet-reverse-operator-attribution
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: spreadsheets, devops, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/reverse-operator-attribution
What's inside
- Skill name
reverse-operator-attribution- Description
- Use this skill when reverse-engineering, sandbox, or threat-intel evidence exposes build paths, usernames, typo fingerprints, version windows, cloud relays, wallets, contracts, peer infrastructure, or other operator traces and the goal is to pivot from malware artifacts to a defensible developer or operator attribution model with prioritized investigative actions.
- License
- unknown
- Instructions
- 131 lines in SKILL.md · view on GitHub
Files (3)
- SKILL.md
- attribution-template.md · assets/
- pivot-priority.md · references/
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from knowlet/reverse-skills
- 0.432score
reverse-rust-malware
knowlet
Use this skill when analyzing stripped or static-linked Rust malware or suspicious Rust ELF binaries.
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-golang-malware
knowlet
Use this skill when analyzing stripped, packed, or statically linked Go malware or suspicious Go binaries and the goal is to recover build metadata, separate…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-golang-symbol-recovery
knowlet
Use this skill when stripped, packed, or poorly labeled Go binaries need function names, package paths, build metadata, source layout clues, types, or…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-ida-mcp-driver
knowlet
Use this skill whenever an `ida-pro-mcp` server is connected and you need to drive IDA Pro efficiently for reverse engineering — structured "survey this…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-malware-triage
knowlet
Use this skill to perform fast malware or suspicious binary triage, extract high-signal evidence, summarize capabilities, identify likely next pivots, and…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-botnet-dismantling
knowlet
Use this skill when reverse-engineering, sandbox, or threat-intel work has already reconstructed a malware or botnet control plane and the goal is to turn…
SkillDFreshness: D★ 1Claude Code +9 - 0.427score
reverse-reporting
knowlet
Use this skill to transform reverse-engineering notes into a concise, analyst-ready report with confidence labels, IOC sections, and prioritized next actions.
SkillDFreshness: D★ 1Claude Code +9 - 0.427score
reverse-protocol-reconstruction
knowlet
Use this skill to reconstruct command flow, transport assumptions, message boundaries, field candidates, and encode/decode behavior from reverse-engineering…
SkillDFreshness: D★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Apr 9, 2026 (6 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- License unknown
- Repository
- github.com/knowlet/reverse-skills
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from knowlet
- 0.432score
reverse-rust-malware
knowlet
Use this skill when analyzing stripped or static-linked Rust malware or suspicious Rust ELF binaries.
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-golang-malware
knowlet
Use this skill when analyzing stripped, packed, or statically linked Go malware or suspicious Go binaries and the goal is to recover build metadata, separate…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-golang-symbol-recovery
knowlet
Use this skill when stripped, packed, or poorly labeled Go binaries need function names, package paths, build metadata, source layout clues, types, or…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-ida-mcp-driver
knowlet
Use this skill whenever an `ida-pro-mcp` server is connected and you need to drive IDA Pro efficiently for reverse engineering — structured "survey this…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-malware-triage
knowlet
Use this skill to perform fast malware or suspicious binary triage, extract high-signal evidence, summarize capabilities, identify likely next pivots, and…
SkillDFreshness: D★ 1Claude Code +9 - 0.432score
reverse-botnet-dismantling
knowlet
Use this skill when reverse-engineering, sandbox, or threat-intel work has already reconstructed a malware or botnet control plane and the goal is to turn…
SkillDFreshness: D★ 1Claude Code +9
Cite this page
reverse-operator-attribution skill. Agent Mart. https://agentmart.dev/skills/knowlet-reverse-operator-attribution (last updated 2026-10-24)