Enterprise DNAEnterprise DNA

Skills

Reverse Engineer Anything (REA)

by morluto

Reverse engineer native, Electron, firmware and browser targets with REA, and build agent environments of web apps.

Our verdict

Not reviewed yet

We have not reviewed Reverse Engineer Anything (REA) yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About Reverse Engineer Anything (REA)

The skill for REA, a reverse engineering toolkit for agents. It uses shipped binaries, packages and runtime evidence to explain features, compare versions, decompile code or guide a rebuild, across native, managed, Electron and JavaScript, packaged, firmware and browser targets. It can also capture a live web app as an AgentEnv bundle. It tells the agent not to use REA when the full source is available.

Best for

Security researchers and engineers working with software they do not have source for

Use cases

  • Find out how a feature in a shipped app actually works
  • Compare two versions of a binary or package
  • Capture a web app as an environment for agent testing

Notes

Why it matters

Agents usually only reason about source code. REA gives them evidence from what actually ships, which is where many real questions are answered.

Source

  • Skill file: .agents/skills/reverse-engineer-anything/SKILL.md in morluto/rea.
  • Repository: 377,748 GitHub stars, MIT licence. Checked 24 Oct 2026 through the GitHub API.
  • Last change to the skill: 24 Oct 2026.
  • This page was written from the skill's own SKILL.md. It is not an Enterprise DNA source review and the skill has not been installed or tested by us.

Pros

  • Covers many target types
  • Clear rule to skip it when source is available
  • Extremely widely used project

Cons

  • Needs the REA MCP server and analysis engines installed
  • Reverse engineering may breach licence terms of some software

Key facts

What we have checked

Not checked yet. Dated facts such as prices, releases and repository activity appear here once we have confirmed them from a source.

Health and security

Is Reverse Engineer Anything (REA) looked after, and what do its setup files show

Security check static checks

100 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked by edna-skill-static-v1 main@9140deae63c5. What it checks

  • Note 1 of 1 packages are not pinned to one version, so only the malicious packages list was checked for them, not version advisories.

Sources

Where this comes from

No sources recorded yet. Each source we check is listed here with the date we checked it.

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.