dsh-rea：用一条开关同时挂载 REA MCP 与三个工作流技能
dsh-rea 是 BJ1919810 维护的 DSH 工作流插件，将 morluto/rea 的 REA MCP 服务与 reverse-engineer-anything、rea-tool-design、rea-changelog-update 三个技能用插件页单一开关同开同关，无需重启。文章说明 GitHub 与本地路径安装、环境变量与引擎自备、与 home patch 冲突处理及作者实测范围；插件不安装 Ghidra/jadx 等，以当前 DSH 进程权限运行。
Read Moresql表逆向实体类和mapper和service：从 MySQL 建表语句生成 Java 实体
介绍 SkillHub 社区 Skill @user_faca7523/sql-to-entity（sql表逆向实体类和mapper和service）。它从 MySQL CREATE TABLE 解析表结构，生成带 MyBatis-Plus、Lombok 注解的 Java 实体类，支持类型映射及表/字段注释，无需 API Key。文章说明坐标、版本 1.0.0、核心能力与适用边界，并给出 skillhub CLI 安装命令及各 Agent skills 目录配置要点，便于在 Cursor 等环境中做数据库表到实体类的逆向工程。
Read Moredsh-ghidra：在 DSH 里把 Ghidra 当工具用的桥接插件
dsh-ghidra 是 spix18 维护的 DSH 客户端插件，通过 PyGhidra 将 Ghidra 12 的导入、分析、反编译、xref、写注释/改名并落盘，以及复合分析与恶意代码 triage 注册为 DSH 工具；默认单 JVM 统一模式对接 GhidraMCP REST，共 219 个工具。安装使用官方命令 dsh plugin --profile web add dsh-ghidra，重启后在 Settings → Ghidra 下载或指定 Ghidra 目录，再用 ghidra_open 打开二进制。含 ghidra_doctor 跨平台自检与自包含数据目录，插件以 DSH 进程权限运行，使用前请核对源码与 MIT 许可证。
Read Moredsh-plugin-reverse：DeepSeek Harness JavaScript 反向工程工具包
DeepSeek Harness 插件旨在解决前端加密分析中环境隔离与依赖缺失的痛点。该插件提供静态还原、辅助定位和验证三大核心能力，可将混淆 JS 转换为无环境依赖的计算函数，生成 Hook 脚本捕获调用信息，并内置多种算法验证。 安装需 Node.js >= 24，通过命令 `dsh plugin --profile web add github:wangyin572/dsh-plugin-reverse` 添加。典型工作流包括评估可行性、生成 Hook、静态提取、代码解混淆及结果验证。该工具仅适用于授权分析场景，需注意安全风险及配置规范。
Read More逆向工程融合技能：用 ORRI 方法提取外部系统设计
介绍 SkillHub 社区 Skill「逆向工程融合技能」（@user_b4bbd9f0/reverse-engineering-fusion，v2.0.0）。说明其以 ORRI（观察→逆向→重建→创新）系统化提取外部系统核心设计，用于竞品能力融合、协议格式提取、架构重构与未知代码库学习；无需 API Key。涵盖 skillhub CLI 安装、各 Agent skills 目录配置及官方触发关键词用法，并提醒合规与社区维护属性。
Read MoreDeepSeek Harness Plugin: dsh-plugin-rea
dsh-plugin-rea is a configuration-based plugin for DeepSeek Harness (DSH), designed to simplify integration with the REA (Reverse Engineer Anything) toolset. By injecting configuration, it registers the local REA MCP service as `mcp__rea__*` tools, enabling direct invocation from DSH sessions. The plugin supports 170+ reverse engineering tools, covering native binaries, Android, JS/Electron, .NET, and firmware analysis. Its core features include pseudocode/assembly analysis, APK decompilation, and more, but it does not include analysis logic and is solely responsible for environment isolation and adaptation. Users must specify the Ghidra path in the configuration and should be mindful of result limitations and permission/compliance issues when using it.
Read MoreDSH Plugin: satan9394/dsh-reverse-engineering
DeepSeek Harness (DSH) provides a plugin called DSH Reverse Engineering, designed to bring reverse engineering, binary analysis, and forensic capabilities to the DSH ecosystem. Inspired by popular projects, it is categorized under `admin-security`. It is not currently available for direct installation and must be reviewed via its GitHub source code and enabled manually. Users should pay attention to permission requirements and are advised to review the source code before installation to verify compliance.
Read Moredsh-reverse-skill: Encapsulating reverse-skill completely as a DSH Cordis plugin
dhicoc/dsh-reverse-skill packages the 87 SKILL.md files from the upstream reverse-skill as-is into a DeepSeek Harness Cordis plugin, covering reverse engineering, authorized penetration testing, and security research. Compared to the preset solution that only ports 45 skills, this plugin automatically registers all skills via ctx.skills, enabling activation with a single "dsh plugin add" command and supporting fallback mounting through customSkillDirs.
Read MoreUse dsh-reverse-skill to load 85 reverse skills into DeepSeek Harness at once
`dsh-reverse-skill` is a DeepSeek Harness skill plugin maintained by dhicoc, which packages all 85 SKILL.md files from the upstream reverse-skill repository (with approximately 26,000 stars) into a Cordis plugin: 43 domain skills and 42 CTF skills, which will be automatically registered via `ctx.skills` upon startup. The directory page installation command is `dsh plugin add github:dhicoc/dsh-reverse-skill`. It is licensed under MIT and is only authorized for reverse engineering, penetration testing and security research. Before installation, please check the source code and license, and note that the plugin runs with the permissions of the current dsh process.
Read More