---
id: 901508
card_url: "https://mdrss.com/security/forensics-and-reverse-engineering/901508"
permalink_url: "https://mdrss.com/m/901508"
thread_url: "https://mdrss.com/s/security"
markdown_url: "https://mdrss.com/security/forensics-and-reverse-engineering/901508/901508.md"
title: "reverse-skill / CHANGELOG.md — Keep a Changelog / SemVer changelog"
annotation: "Keep a Changelog / SemVer changelog. Documents the 1.0.0 release (2026-07-18): the ops/combat-contract layer, PRIMARY routing and case tooling, core skills and localization, plus an Unreleased section with Fixed, Security, Added and Removed changes."
state: published
thread: security
domain: security
category: forensics-and-reverse-engineering
type: reference
tags: ["zhaoxuya520-reverse-skill", "reverse-skill", "reverse-engineering", "agent-skills", "skill-md", "markdown", "for-humans", "changelog", "security", "collider-club"]
ontology_terms: ["concept:forensics-and-reverse-engineering", "org:collider-club"]
relation_terms: []
license: "MIT"
version: 1
snapshot_at: "2026-08-05T14:42:51.721Z"
source_url: "https://github.com/zhaoxuya520/reverse-skill/blob/main/CHANGELOG.md"
source_kind: "api"
platform_scam_risk: 5
platform_evidence_score: 100
evidence_urls:
  - "https://github.com/zhaoxuya520/reverse-skill/blob/main/CHANGELOG.md"
  - "https://raw.githubusercontent.com/zhaoxuya520/reverse-skill/main/CHANGELOG.md"
  - "https://github.com/zhaoxuya520/reverse-skill"
  - "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
  - "https://opensource.org/licenses/MIT"
---
> **MDRSS snapshot** · `CHANGELOG.md` from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill/blob/main/CHANGELOG.md) · audience: humans · License: MIT (repo root).
>
> Keep a Changelog / SemVer changelog.

---

# Changelog

All notable changes to **reverse-skill** are documented in this file.

Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
Versioning follows [Semantic Versioning](https://semver.org/).

## [Unreleased]

### Fixed

- Routing: sigma vs malware, LLM 越狱 vs iOS 越狱, 完整渗透/打到域控 vs AD 域控, forensics vs OT ics; master-route.ps1 rewritten UTF-8 BOM for PS 5.1 CJK
- Linux/macOS bootstrap: register PentestSwarm MCP with a verified executable path after Go install or when already installed

### Security

- Added `docs/PACKAGE-SECURITY-AUDIT.md`: static audit of package executables (no backdoor / no auto DB wipe found)
- Pin supply-chain floating tags: jshook `@0.3.4`, pentestswarm `v0.1.0`
- Bootstrap integrity: GitHub zip/jar downloads verify `assetSha256` (manifest) or GitHub API `digest`; mismatch deletes file and fails
- Pin jadx `v1.5.6` and apktool `v3.0.2` with published SHA256


### Added

- Domain skills R21–R27, R29–R30: `protocol-reverse`, `ghidra-reverse`, `cloud-k8s`, `windows-ad`, `digital-forensics`, `code-audit`, `threat-hunting`, `wifi-wireless`, `browser-extension-reverse`
- High-quality skills R28, R31–R38: `ot-ics`, `macos-reverse`, `thick-client`, `go-rust-reverse`, `hardware-security`, `database-security`, `email-security`, `identity-federation`, `radio-sdr`
- Wired into `MASTER-ROUTING.md`, `master-route.ps1`, routing tables, domain map, role-map, coherence tests

### Removed

- `game-reverse/` (not a product focus; Unity/IL2CPP remains via `reverse-engineering` + seed-014)

## [1.0.0] — 2026-07-18

First **formal** public release of the reverse-skill skill-router pack.

### Added

#### Ops / combat contract layer (`skills/ops/`)

- `IDENTITY.md` — product identity: lightweight skill router + bootstrap + field-journal (not a Z3r0-style platform)
- `scope-contract.md` — case scope + `network_profile`; **auth not granted → no ACT on target**
- `evidence-finding-path.md` — Evidence → Finding → Path chain
- `role-map.md` — lead / specialist role mapping and handoff
- `timeline-workitem.md` — timeline + workitem coverage
- `sandbox-profile.md` — tool profile mapping
- `skill-supply-chain.md` — Agent Skill / MCP install gate (AST10-lite)

#### PRIMARY routing & case tooling (`skills/scripts/`)

- `master-route.ps1` — PRIMARY route from task hint
- `case-init.ps1` / `case-guard.ps1` — case bootstrap + scope guard
- `append-evidence.ps1` — structured evidence append
- `smoke.ps1` — package smoke checks
- `verify-routing-coherence.ps1` — routing / ops coherence verification
- `test-p0-friction.ps1` — P0 client-side lab friction regression tests

#### Core skills & docs

- Full skill matrix: APK / IDA / radare2 / JS / .NET / mobile / malware / pwn / firmware / EDR / pentest / API / LLM / supply-chain / crypto / binary-diff / patch-diff / attack-chain / docs & diagrams
- `MASTER-ROUTING.md` + `routing.md` / `routing_zh.md` three-axis matrix
- Bootstrap + tool-index pipeline (`bootstrap-reverse.ps1` / `.sh`, `refresh-tool-index`)
- `field-journal` precedent library + completion checklist
- Multi-platform paths: Windows primary, Linux / macOS / Kali docs and scripts
- CTF-Sandbox-Orchestrator competition sub-skills
- Burp MCP extension package (`burp-mcp-full/`)

#### Quality / localization

- UTF-8 integrity for Chinese docs (`RULES_zh`, `routing_zh`, related guides)
- Client-side lab playbook and recon pipeline references for authorized testing friction reduction

### Notes

- `skills/tool-index.md` / `tool-index.json` are **machine-local** and intentionally gitignored; generate via `refresh-tool-index` after clone.
- This tag freezes the skill-router product surface at commit `9fc280b` plus this release metadata.

### Links

- Tag: `v1.0.0`
- Repository: https://github.com/zhaoxuya520/reverse-skill

[1.0.0]: https://github.com/zhaoxuya520/reverse-skill/releases/tag/v1.0.0


---

*Snapshot metrics: 3944 B · 84 lines · ~979 tokens · 14 headings · git mode 100644.*