From 1da7a32ae1116d27a7faefa39579139df8413be2 Mon Sep 17 00:00:00 2001 From: mashagua <993498039@qq.com> Date: Sun, 18 Oct 2026 17:51:13 +0800 Subject: [PATCH] =?UTF-8?q?feat:=20=E6=94=B6=E5=BD=95=20REA=20=E9=80=86?= =?UTF-8?q?=E5=90=91=E5=88=86=E6=9E=90=E6=8A=80=E8=83=BD=20/=20add=20REA?= =?UTF-8?q?=20reverse-engineering=20skill=20(#212)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## 中文 以 `entry.json` 指针与 `catalog-metadata.v1.json` 收录 morluto/rea 的用户技能 `reverse-engineer-anything`，正文留在上游。固定 `source.ref` 951c2aae3be1c357df9f23558d8c09680e64c2cb、`source.path` `.agents/skills/reverse-engineer-anything`，MIT，community/allowed；维护者未验证、上游未背书。双语文案披露另备的 Node.js/npm、rea-agents CLI 或 REA MCP、目标相关引擎与商用许可。 与 #220 合入后的 main 解决 manifest 冲突：技能总数 143，市场版本 1.5.12。验证：catalog 校验 0 errors / 105 既有 warnings，i18n 校验与 translate --check 通过；远端 validate、translate 通过。 ## English List morluto/rea's user-facing `reverse-engineer-anything` skill as a pinned pointer plus catalog metadata; the skill body stays upstream. Pinned to 951c2aae3be1c357df9f23558d8c09680e64c2cb at `.agents/skills/reverse-engineer-anything`, MIT, community/allowed, unverified maintainers, no upstream endorsement. Both locales disclose separately supplied Node.js/npm, the rea-agents CLI or REA MCP, target-specific engines and commercial licenses. The manifest conflict with main after #220 is resolved: 143 skills, market version 1.5.12. Catalog validation reports 0 errors with 105 existing warnings; i18n validation and translate --check pass; remote validate and translate passed. --- manifest.json | 4 +- .../catalog-metadata.v1.json | 108 ++++++++++++++++++ skills/reverse-engineer-anything/entry.json | 39 +++++++ 3 files changed, 149 insertions(+), 2 deletions(-) create mode 100644 skills/reverse-engineer-anything/catalog-metadata.v1.json create mode 100644 skills/reverse-engineer-anything/entry.json diff --git a/manifest.json b/manifest.json index a7b1d4d..739707d 100644 --- a/manifest.json +++ b/manifest.json @@ -1,6 +1,6 @@ { "name": "DesireCore Official Market", - "version": "1.5.11", + "version": "1.5.12", "schemaVersion": "1.1.0", "supportedLocales": [ "zh-CN", @@ -31,7 +31,7 @@ "stats": { "totalAgents": 8, "totalTeams": 2, - "totalSkills": 142, + "totalSkills": 143, "lastUpdated": "2026-10-18" }, "features": [ diff --git a/skills/reverse-engineer-anything/catalog-metadata.v1.json b/skills/reverse-engineer-anything/catalog-metadata.v1.json new file mode 100644 index 0000000..d8346e8 --- /dev/null +++ b/skills/reverse-engineer-anything/catalog-metadata.v1.json @@ -0,0 +1,108 @@ +{ + "$schema": "../../schemas/catalog-metadata.v1.schema.json", + "schemaVersion": 1, + "identity": { + "kind": "skill", + "id": "reverse-engineer-anything" + }, + "presentation": { + "defaultLocale": "en-US", + "i18n": { + "zh-CN": { + "name": "REA 逆向分析", + "summary": "基于证据分析二进制、软件包与应用行为。需另备受支持的 Node.js/npm、rea-agents CLI 或已注册的 REA MCP；原生分析等流程需另备目标相关工具及权限，商业提供方须另行授权付费。安装本技能仅提供指引，不安装工具或注册服务；依赖不可用时先处理阻碍，不编造结果。" + }, + "en-US": { + "name": "REA: Reverse Engineer Anything", + "summary": "Evidence-led reverse analysis of binaries, packages and app behavior. Requires supported Node.js/npm and rea-agents CLI or a registered REA MCP server; target-specific tools, permissions and any commercial provider licenses are separate. Installing this skill only supplies instructions; it does not install tools or register services. Resolve missing dependencies before claiming results." + } + }, + "category": "development", + "tags": [ + "reverse-engineering", + "binary-analysis", + "evidence", + "mcp", + "cli" + ] + }, + "release": { + "state": "unknown" + }, + "timestamps": { + "catalogUpdatedAt": { + "state": "known", + "value": "2026-10-11", + "precision": "day" + }, + "releasePublishedAt": { + "state": "unknown" + }, + "reviewedAt": { + "state": "known", + "value": "2026-10-11", + "precision": "day" + }, + "upstreamObservedAt": { + "state": "known", + "value": "2026-10-11", + "precision": "day" + } + }, + "provenance": { + "content": { + "kind": "git", + "url": "https://github.com/morluto/rea.git", + "path": ".agents/skills/reverse-engineer-anything", + "ref": "951c2aae3be1c357df9f23558d8c09680e64c2cb" + } + }, + "governance": { + "stewardship": "community", + "availability": "installable", + "license": { + "state": "known", + "value": "MIT", + "evidencePath": "LICENSE" + }, + "redistribution": "allowed", + "upstreamMaintainer": { + "name": "morluto", + "url": "https://github.com/morluto/rea", + "verified": false + }, + "compliance": { + "licenseEvidencePath": "LICENSE", + "reviewedRef": "951c2aae3be1c357df9f23558d8c09680e64c2cb", + "reviewedAt": "2026-10-11", + "reviewedBy": "mashagua", + "upstreamEndorsed": false + } + }, + "compatibility": { + "platforms": { + "state": "unknown" + }, + "requirements": [ + { + "kind": "runtime", + "value": "需 Node.js ^22.19.0 || ^24.11.0 || >=26.0.0 及 npm；requires the supported Node.js range and npm." + }, + { + "kind": "connection", + "value": "另备 rea-agents CLI；MCP 工作流需另注册 REA MCP，并核对实际工具列表/版本。CLI-only hosts can use the separately acquired CLI; this skill neither installs REA nor registers an MCP server." + }, + { + "kind": "runtime", + "value": "目标相关工具另备，例如原生分析 Hopper/Ghidra/IDA，Android JADX/JDK/adb，固件 Binwalk/Unblob。Target-specific tools and their supported hosts are separate; commercial Hopper/IDA/JEB providers require their own licenses and costs." + }, + { + "kind": "permission", + "value": "仅分析已获授权的目标；运行时操作需相应系统权限与授权，缺工具/连接时先解决或停止，不虚构成功。Use authorized targets; runtime observation needs applicable OS/user approvals. Resolve unavailable dependencies or stop before unsupported calls; never fabricate results." + } + ] + }, + "spec": { + "kind": "skill" + } +} diff --git a/skills/reverse-engineer-anything/entry.json b/skills/reverse-engineer-anything/entry.json new file mode 100644 index 0000000..397c394 --- /dev/null +++ b/skills/reverse-engineer-anything/entry.json @@ -0,0 +1,39 @@ +{ + "id": "reverse-engineer-anything", + "name": "REA: Reverse Engineer Anything", + "category": "development", + "icon": "", + "tags": [ + "reverse-engineering", + "binary-analysis", + "evidence", + "mcp", + "cli" + ], + "i18n": { + "zh-CN": { + "name": "REA 逆向分析", + "shortDesc": "基于证据分析二进制、软件包与应用行为。需另备受支持的 Node.js/npm、rea-agents CLI 或已注册的 REA MCP；原生分析等流程需另备目标相关工具及权限，商业提供方须另行授权付费。安装本技能仅提供指引，不安装工具或注册服务；依赖不可用时先处理阻碍，不编造结果。" + }, + "en-US": { + "name": "REA: Reverse Engineer Anything", + "shortDesc": "Evidence-led reverse analysis of binaries, packages and app behavior. Requires supported Node.js/npm and rea-agents CLI or a registered REA MCP server; target-specific tools, permissions and any commercial provider licenses are separate. Installing this skill only supplies instructions; it does not install tools or register services. Resolve missing dependencies before claiming results." + } + }, + "maintainer": { + "name": "morluto", + "verified": false, + "account": "morluto", + "url": "https://github.com/morluto/rea" + }, + "stewardship": "community", + "license": "MIT", + "redistribution": "allowed", + "source": { + "kind": "git", + "repoUrl": "https://github.com/morluto/rea.git", + "repoBranch": "main", + "ref": "951c2aae3be1c357df9f23558d8c09680e64c2cb", + "path": ".agents/skills/reverse-engineer-anything" + } +}