reverse-skill
reverse-skill 部署：固定客户端、工具与证据边界
覆盖 Windows、Ubuntu、Kali、AI 客户端、工具索引、CI 回归和隔离案例。
你将学会
- Plan a cross-platform reverse-skill deployment
- Operate routing CI and supply-chain gates
- Design recovery and retention controls
开始前需要
- Basic Git and command-line usage
- Comfort reading a project README
You can explain the project, run its documented first step, and decide what to verify before adopting it.
先看结论
- Deploy on an isolated, pinned host with explicit network and credential boundaries.
- Keep client adapters optional and validate tool provenance separately.
- Use the documented Windows/Ubuntu regression and coherence gates for every routing change.
Choose an isolated host
在隔离主机固定 reverse-skill、Java/Node/Python、客户端和工具版本；刷新索引并审阅来源，再运行 173 案例回归、结构供应链门禁、smoke 和 INDEX 漂移检查。
Pin the reverse-skill tag or audited commit, inspect `README_AI.md`, `RULES.md`, and `docs/UV-AND-DOWNLOAD-SECURITY.md`, then record the host, client, tool versions, and permitted network profile.
Install and refresh deliberately
Clone the repository, run the platform refresh script, and inspect the generated tool index before loading a case. A tool appearing in the index does not prove its license, binary provenance, or suitability; attach checksums and ownership to the deployment receipt.
Keep optional client adapters outside the routing core. The README describes Claude Code, Codex, Cursor, and OpenCode as client-neutral integrations; test one adapter at a time so a client-specific permission does not silently widen the core scope.
Gate changes in CI
Routing/config changes should run the 173-case regression benchmark, structure and supply-chain coherence gate, smoke checks, and INDEX drift check on Windows and Ubuntu. Fail closed on unpinned auto-downloads or missing manifests.
For a fork, preserve the routing single source of truth, update generated indexes together, and publish the exact receipts and diffs. A green CI run proves consistency of the tested contract, not authorization for a new target.
Operate and recover
Back up routing manifests and redacted case metadata, rotate any service credentials, and define retention for samples, PCAPs, reports, and journals. If a tool or adapter is compromised, stop the case, quarantine artifacts, revoke credentials, restore a known-good commit, and rerun coherence checks.
如何选择
| 比较维度 | 方案 A | 方案 B |
|---|---|---|
| Best when | You need predictable behavior and easy auditing | You need adaptive optimization and have reliable telemetry |
| Main risk | May leave performance on the table | Can become difficult to explain or debug |
实施步骤
- 1
Choose a disposable host and pin reverse-skill plus runtime versions.
- 2
Refresh the tool index and review binary/license provenance.
- 3
Run routing, coherence, smoke, and index-drift checks in CI.
- 4
Back up manifests, define retention, and rehearse quarantine/rollback.
可复制示例
powershell -File skills/scripts/test-routing.ps1
powershell -File skills/scripts/verify-routing-coherence.ps1
powershell -File skills/scripts/smoke.ps1
powershell -File skills/scripts/extract-summaries.ps1 -Check常见问题
Does CI validate every external tool's safety?
No. It validates the repository's routing and structure contract; inspect each tool, license, binary, and target authorization separately.
Can I put case files in the repository?
Keep local cases in the documented work area or a controlled evidence store, and commit only sanitized fixtures and manifests.
资料来源
- reverse-skill README (captured 2026-08-31)来源核查 2026-08-31
- reverse-skill repository来源核查 2026-08-31