manyuegong33/r0crawl_skills

What it is

r0crawl_skills is a skill library for Codex-style AI coding agents. The catalog summary covers the 196 modules and their scope; what it does not carry is how you install and invoke the thing, the router's actual entry questions, and the exact script commands.

What to do

Install by copying the directory into the Codex skills path (PowerShell):

Copy-Item -Recurse .\r0crawl_skills $env:USERPROFILE\.codex\skills\r0crawl_skills

Then invoke it in-agent with the phrase (Chinese): 使用 r0crawl_skills。对这个目标开始一次新手友好的调查。 ("Use r0crawl_skills. Start a beginner-friendly investigation on this target.")

The router opens with four scoping questions rather than dumping terminology: what are we analyzing, which action is most critical, what material is already on hand, and what outcome is wanted — then it returns a single route.

The lightweight scripts under scripts/ run as:

python scripts/init_case.py demo-signature
python scripts/module_router.py "Android APK Frida dump dex"
python scripts/hash_artifact.py sample.apk

Preconditions / Affected

Windows/Codex-agent oriented: the install path uses $env:USERPROFILE\.codex\skills\ and PowerShell Copy-Item. All documentation is Chinese-only — the summary notes "Chinese-language" but the practical consequence is that the router prompts, module names, and playbooks are entirely in Chinese, which matters for an engineer deciding whether to route work through it.

Caveats

The page states an explicit "don't copy" ("不复制") distillation strategy — capabilities are refined from public reverse-engineering practice rather than copied source, with sources documented in the research notes (references/). The ten example playbooks are described as sanitized/desensitized (脱敏). Generated module index lives at references/generated-index.md.

Note the page lists coverage the summary omits: iOS, fuzzing (模糊测试), cloud/API, and game reverse-engineering, plus named verticals (aviation/travel, e-commerce risk control, financial data, logistics, government portals) and protocol targets (live-streaming WebSocket, Protobuf, GraphQL, WASM signatures) — relevant if your target falls in one of those domains.