rev-symbol — Claude Code skill: what it does, how to install
Recovers function names in decompiled code by analyzing constants, strings, and call relationships. Useful when reverse engineering stripped binaries.
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a claude-codeWhat rev-symbol does
This skill identifies the purpose of stripped functions in decompiled C code. It inspects internal characteristics such as string literals, numeric constants, and loop structures. When recognized cryptographic constants or compression headers appear, it flags the matching algorithm immediately.
Cross-reference patterns help determine function identities. The tool inspects caller and callee chains, matching paired calls such as memory allocation or mutex handling. Crucially, the skill fails to operate without an active IDA Pro MCP connection or an exported IDA-NO-MCP directory structure containing decompiled files.
What it helps with
- identify cryptographic and hashing routines from magic constants
- assign descriptive symbols to unnamed decompiled functions
- deduce API usage from paired function call patterns
- trace caller chains to verify return value handling
Example prompts for the agent
- Identify the function at address 0x401000 from its decompiled code
- Recover the symbol for sub_401234 using its cross-references and strings
- Analyze constants in this function and suggest an appropriate name
How to install rev-symbol
1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a claude-code2Manually: put the files in place
~/.claude/skills/rev-symbol/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/rev-symbol/
1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a codex2Manually: put the files in place
.agents/skills/rev-symbol/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a cursor2Manually: put the files in place
.cursor/skills/rev-symbol/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install P4nda0s/reverse-skills rev-symbol2Manually: put the files in place
.github/skills/rev-symbol/SKILL.md1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a gemini-cli2Platform CLI
gemini skills install https://github.com/P4nda0s/reverse-skills --path skills/rev-symbolManually: put the files in place
.devin/skills/rev-symbol/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about rev-symbol
How to install rev-symbol in Claude Code?
Run npx skills add P4nda0s/reverse-skills --skill rev-symbol -a claude-code.
What does rev-symbol do?
It evaluates decompiled C functions, cross-references imports, and analyzes constants to suggest accurate function names along with confidence ratings.
What prerequisites are needed to run rev-symbol?
It requires an active IDA Pro MCP connection or exported files from the IDA-NO-MCP plugin, including the decompile/ directory and string tables.
