feat: 收录 REA 逆向分析技能 / add REA reverse-engineering skill (#212)

## 中文以 `entry.json` 指针与 `catalog-metadata.v1.json` 收录 morluto/rea 的用户技能 `reverse-engineer-anything`，正文留在上游。固定 `source.ref` 951c2aae3be1c357df9f23558d8c09680e64c2cb、`source.path` `.agents/skills/reverse-engineer-anything`，MIT，community/allowed；维护者未验证、上游未背书。双语文案披露另备的 Node.js/npm、rea-agents CLI 或 REA MCP、目标相关引擎与商用许可。与 #220 合入后的 main 解决 manifest 冲突：技能总数 143，市场版本 1.5.12。验证：catalog 校验 0 errors / 105 既有 warnings，i18n 校验与 translate --check 通过；远端 validate、translate 通过。 ## English List morluto/rea's user-facing `reverse-engineer-anything` skill as a pinned pointer plus catalog metadata; the skill body stays upstream. Pinned to 951c2aae3be1c357df9f23558d8c09680e64c2cb at `.agents/skills/reverse-engineer-anything`, MIT, community/allowed, unverified maintainers, no upstream endorsement. Both locales disclose separately supplied Node.js/npm, the rea-agents CLI or REA MCP, target-specific engines and commercial licenses. The manifest conflict with main after #220 is resolved: 143 skills, market version 1.5.12. Catalog validation reports 0 errors with 105 existing warnings; i18n validation and translate --check pass; remote validate and translate passed.
2026-10-21 06:24:08 +08:00 · 2026-10-18 17:51:13 +08:00
parent 990798fd4d
commit 1da7a32ae1
3 changed files with 149 additions and 2 deletions
--- a/manifest.json
+++ b/manifest.json
@@ -1,6 +1,6 @@
 {
  "name": "DesireCore Official Market",
-  "version": "1.5.11",
+  "version": "1.5.12",
  "schemaVersion": "1.1.0",
  "supportedLocales": [
    "zh-CN",
@@ -31,7 +31,7 @@
  "stats": {
    "totalAgents": 8,
    "totalTeams": 2,
-    "totalSkills": 142,
+    "totalSkills": 143,
    "lastUpdated": "2026-10-18"
  },
  "features": [
--- a/skills/reverse-engineer-anything/catalog-metadata.v1.json
+++ b/skills/reverse-engineer-anything/catalog-metadata.v1.json
@@ -0,0 +1,108 @@
+{
+  "$schema": "../../schemas/catalog-metadata.v1.schema.json",
+  "schemaVersion": 1,
+  "identity": {
+    "kind": "skill",
+    "id": "reverse-engineer-anything"
+  },
+  "presentation": {
+    "defaultLocale": "en-US",
+    "i18n": {
+      "zh-CN": {
+        "name": "REA 逆向分析",
+        "summary": "基于证据分析二进制、软件包与应用行为。需另备受支持的 Node.js/npm、rea-agents CLI 或已注册的 REA MCP；原生分析等流程需另备目标相关工具及权限，商业提供方须另行授权付费。安装本技能仅提供指引，不安装工具或注册服务；依赖不可用时先处理阻碍，不编造结果。"
+      },
+      "en-US": {
+        "name": "REA: Reverse Engineer Anything",
+        "summary": "Evidence-led reverse analysis of binaries, packages and app behavior. Requires supported Node.js/npm and rea-agents CLI or a registered REA MCP server; target-specific tools, permissions and any commercial provider licenses are separate. Installing this skill only supplies instructions; it does not install tools or register services. Resolve missing dependencies before claiming results."
+      }
+    },
+    "category": "development",
+    "tags": [
+      "reverse-engineering",
+      "binary-analysis",
+      "evidence",
+      "mcp",
+      "cli"
+    ]
+  },
+  "release": {
+    "state": "unknown"
+  },
+  "timestamps": {
+    "catalogUpdatedAt": {
+      "state": "known",
+      "value": "2026-10-11",
+      "precision": "day"
+    },
+    "releasePublishedAt": {
+      "state": "unknown"
+    },
+    "reviewedAt": {
+      "state": "known",
+      "value": "2026-10-11",
+      "precision": "day"
+    },
+    "upstreamObservedAt": {
+      "state": "known",
+      "value": "2026-10-11",
+      "precision": "day"
+    }
+  },
+  "provenance": {
+    "content": {
+      "kind": "git",
+      "url": "https://github.com/morluto/rea.git",
+      "path": ".agents/skills/reverse-engineer-anything",
+      "ref": "951c2aae3be1c357df9f23558d8c09680e64c2cb"
+    }
+  },
+  "governance": {
+    "stewardship": "community",
+    "availability": "installable",
+    "license": {
+      "state": "known",
+      "value": "MIT",
+      "evidencePath": "LICENSE"
+    },
+    "redistribution": "allowed",
+    "upstreamMaintainer": {
+      "name": "morluto",
+      "url": "https://github.com/morluto/rea",
+      "verified": false
+    },
+    "compliance": {
+      "licenseEvidencePath": "LICENSE",
+      "reviewedRef": "951c2aae3be1c357df9f23558d8c09680e64c2cb",
+      "reviewedAt": "2026-10-11",
+      "reviewedBy": "mashagua",
+      "upstreamEndorsed": false
+    }
+  },
+  "compatibility": {
+    "platforms": {
+      "state": "unknown"
+    },
+    "requirements": [
+      {
+        "kind": "runtime",
+        "value": "需 Node.js ^22.19.0 || ^24.11.0 || >=26.0.0 及 npm；requires the supported Node.js range and npm."
+      },
+      {
+        "kind": "connection",
+        "value": "另备 rea-agents CLI；MCP 工作流需另注册 REA MCP，并核对实际工具列表/版本。CLI-only hosts can use the separately acquired CLI; this skill neither installs REA nor registers an MCP server."
+      },
+      {
+        "kind": "runtime",
+        "value": "目标相关工具另备，例如原生分析 Hopper/Ghidra/IDA，Android JADX/JDK/adb，固件 Binwalk/Unblob。Target-specific tools and their supported hosts are separate; commercial Hopper/IDA/JEB providers require their own licenses and costs."
+      },
+      {
+        "kind": "permission",
+        "value": "仅分析已获授权的目标；运行时操作需相应系统权限与授权，缺工具/连接时先解决或停止，不虚构成功。Use authorized targets; runtime observation needs applicable OS/user approvals. Resolve unavailable dependencies or stop before unsupported calls; never fabricate results."
+      }
+    ]
+  },
+  "spec": {
+    "kind": "skill"
+  }
+}
--- a/skills/reverse-engineer-anything/entry.json
+++ b/skills/reverse-engineer-anything/entry.json
@@ -0,0 +1,39 @@
+{
+  "id": "reverse-engineer-anything",
+  "name": "REA: Reverse Engineer Anything",
+  "category": "development",
+  "icon": "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"m8 5-6 7 6 7m8-14 6 7-6 7m-5 1 2-16\" stroke=\"#2563EB\" stroke-width=\"1.7\" stroke-linecap=\"round\" stroke-linejoin=\"round\"/></svg>",
+  "tags": [
+    "reverse-engineering",
+    "binary-analysis",
+    "evidence",
+    "mcp",
+    "cli"
+  ],
+  "i18n": {
+    "zh-CN": {
+      "name": "REA 逆向分析",
+      "shortDesc": "基于证据分析二进制、软件包与应用行为。需另备受支持的 Node.js/npm、rea-agents CLI 或已注册的 REA MCP；原生分析等流程需另备目标相关工具及权限，商业提供方须另行授权付费。安装本技能仅提供指引，不安装工具或注册服务；依赖不可用时先处理阻碍，不编造结果。"
+    },
+    "en-US": {
+      "name": "REA: Reverse Engineer Anything",
+      "shortDesc": "Evidence-led reverse analysis of binaries, packages and app behavior. Requires supported Node.js/npm and rea-agents CLI or a registered REA MCP server; target-specific tools, permissions and any commercial provider licenses are separate. Installing this skill only supplies instructions; it does not install tools or register services. Resolve missing dependencies before claiming results."
+    }
+  },
+  "maintainer": {
+    "name": "morluto",
+    "verified": false,
+    "account": "morluto",
+    "url": "https://github.com/morluto/rea"
+  },
+  "stewardship": "community",
+  "license": "MIT",
+  "redistribution": "allowed",
+  "source": {
+    "kind": "git",
+    "repoUrl": "https://github.com/morluto/rea.git",
+    "repoBranch": "main",
+    "ref": "951c2aae3be1c357df9f23558d8c09680e64c2cb",
+    "path": ".agents/skills/reverse-engineer-anything"
+  }
+}