Fla Ascend Performance
fla-org/flash-linear-attention
Guidelines for Ascend NPU kernel / Triton-Ascend backend performance work in the FLA repo.
勒索软件分析：加密识别、勒索信、解密恢复思路. An agent skill from dslsdzc/rev-skills.
Install Re Ransomware
$ npx skills add dslsdzc/rev-skills --skill re-ransomware -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install dslsdzc/rev-skills re-ransomware --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/dslsdzc/rev-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/re-ransomware .claude/skills/re-ransomware && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "re-ransomware" agent skill from https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomware into .claude/skills/re-ransomware/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "re-ransomware", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomwareType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add dslsdzc/rev-skills --skill re-ransomware -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install dslsdzc/rev-skills re-ransomware --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dslsdzc/rev-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.claude/skills/re-ransomware .agents/skills/re-ransomware && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "re-ransomware" agent skill from https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomware into .agents/skills/re-ransomware/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "re-ransomware", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add dslsdzc/rev-skills --skill re-ransomware -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install dslsdzc/rev-skills re-ransomware --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dslsdzc/rev-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.claude/skills/re-ransomware .cursor/skills/re-ransomware && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "re-ransomware" agent skill from https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomware into .cursor/skills/re-ransomware/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "re-ransomware", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/dslsdzc/rev-skills.git --path .claude/skills/re-ransomware--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add dslsdzc/rev-skills --skill re-ransomware -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install dslsdzc/rev-skills re-ransomware --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dslsdzc/rev-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.claude/skills/re-ransomware .gemini/skills/re-ransomware && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "re-ransomware" agent skill from https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomware into .gemini/skills/re-ransomware/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "re-ransomware", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install dslsdzc/rev-skills re-ransomwareInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add dslsdzc/rev-skills --skill re-ransomware -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/dslsdzc/rev-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/.claude/skills/re-ransomware .github/skills/re-ransomware && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "re-ransomware" agent skill from https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomware into .github/skills/re-ransomware/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "re-ransomware", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add dslsdzc/rev-skills --skill re-ransomware -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install dslsdzc/rev-skills re-ransomware --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dslsdzc/rev-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.claude/skills/re-ransomware .opencode/skills/re-ransomware && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "re-ransomware" agent skill from https://github.com/dslsdzc/rev-skills/tree/main/.claude/skills/re-ransomware into .opencode/skills/re-ransomware/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "re-ransomware", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
re-ransomware- GitHub stars
- 130
- Token cost
- ~1.2k tokens
- SKILL.md length
- 318 words
- Files
- 1
- Skills in repo
- 40
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
勒索软件分析：加密识别、勒索信、解密恢复思路. An agent skill from dslsdzc/rev-skills.
- Works in 5 steps: 初始判断（扩展名变化 / 加密头特征 / 勒索信） → 加密算法识别（走 crypto 域） → 密钥管理还原（本地 / 网络 / C2 分发） → …
- Security work in your project
- SKILL.md covers 何时使用 / 何时不用, 工具准备, 操作步骤 and 跨域联合, plus 1 more section
- Calls python3, apt and dnf
What it does
Re Ransomware is an agent skill from dslsdzc/rev-skills. 勒索软件分析：加密识别、勒索信、解密恢复思路。 触发词：勒索、ransomware、加密文件、勒索信、解密恢复
Its SKILL.md is about 1.2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security. The repository describes itself as: 122 个逆向工程 AI 技能（可发布、跨平台）：恶意软件分析 / 软件逆向 / 固件嵌入式 / 协议逆向 / 移动应用 / 脱壳反混淆 / 软件破解 / 漏洞挖掘 / 托管代码 / 取证情报 / CTF。 The licence is Apache-2.0.
When your agent uses it
- Security work in your project
Example prompts
- “/re-ransomware”
Requirements
- Python 3
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- 初始判断（扩展名变化 / 加密头特征 / 勒索信）
- 加密算法识别（走 crypto 域）
- 密钥管理还原（本地 / 网络 / C2 分发）
- 勒索信与 C2 交互（走 [[re-protocol]]）
- 恢复思路（密钥提取 → 解密脚本；无密钥 → 社区工具）
What it can do on your machine
Read from SKILL.md and the folder at commit bd21db8. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
python3aptdnf
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Re Ransomware loads about 1.2k tokens when it runs. Until then it costs about 17 tokens; SKILL.md has 318 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from dslsdzc/rev-skills at commit bd21db8, republished under its Apache-2.0 licence (© dslsdzc). 318 words, ~1,222 tokens.
Download SKILL.mdSave it as
.claude/skills/re-ransomware/SKILL.md (or your agent's skills folder).- name
- re-ransomware
- description
- 勒索软件分析：加密识别、勒索信、解密恢复思路。 触发词：勒索、ransomware、加密文件、勒索信、解密恢复
- capabilities
- malware-behavior, crypto-identification
勒索软件分析（加密识别 / 勒索信 / 解密恢复）
何时使用 / 何时不用
- 用：受害者文件被加密（扩展名变化、文件头损坏、熵升高）、出现勒索信（README/DECRYPT）的样本
- 用：需要判断"能不能恢复"并给出解密恢复路线（密钥提取 → 解密脚本 / 社区解密工具）
- 用：勒索样本的加密算法、密钥管理、C2 交互还原
- 不用：样本还没确认是勒索（先 [[re-triage]] 初勘 + [[re-behavior]] 行为确认）
- 不用：只分析加密算法本身（直接走 [[re-crypto-id]] / [[re-crypto-keys]]）
- 注意：运行样本 = 会真实加密文件，必须在沙箱快照内（[[re-sandbox]] 强制前置，[[re-analyze/platform-tips]] 最高原则）；静态分析可免沙箱
工具准备
所有工具先验证再使用。加密三件套与沙箱的完整装法见各技能，本技能直接复用；本技能独有的是文件系统快照工具（防样本加密破坏分析环境，坑 1）。
加密分析三件套（复用 crypto 域）
- [[re-crypto-id]]：算法识别（常量表指纹、自定义加密）
- [[re-crypto-keys]]：密钥提取（硬编码/内存/资源）
- [[re-crypto-decrypt]]：解密脚本（pycryptodome 装法见该技能）
- 验证:
python3 -c "from Crypto.Cipher import AES; print('ok')"（见 [[re-crypto-decrypt]]）
沙箱环境（运行前置）
- [[re-sandbox]]：VM 快照 + 网络隔离（INetSim / fake DNS）；勒索样本动态分析默认 VM 快照级别（加密行为破坏性强）
- 验证: 快照
VBoxManage snapshot <vm> list有 clean；网络ping 8.8.8.8不通
文件系统快照工具（加密前状态留底）
- Linux: btrfs 快照
snapper——Debian/Ubuntuapt install snapper/ Fedoradnf install snapper/ Archpacman -S snapper；验证:snapper --version。非 btrfs 用tar/rsync（自带）备份观察目录 - Windows: 卷影复制
vssadmin（系统自带）——vssadmin list shadows验证；快照也是解密恢复途径之一（步骤 5） - macOS: Time Machine
tmutil（自带）——tmutil listbackups验证 - 哈希/枚举:
sha256sum/find（coreutils 自带）
家族识别与解密工具调研（在线，无需安装）
- ID Ransomware（id-ransomware.malwarehunterteam.com）：上传勒索信/加密文件头识别家族
- No More Ransom（nomoreransom.org）：官方解密器集合（坑 4 时效性）
- [[re-ti]]：样本哈希查 VT / 社区报告，确认家族与已有分析结论
操作步骤
按顺序执行，每步记录证据（路径 + sha256，见 [[re-triage]]）。静态优先（[[re-analyze/platform-tips]] 静态优先原则）：先在宿主机做 1-2，需要运行时才进沙箱。
初始判断（扩展名变化 / 加密头特征 / 勒索信）：
sh sha256sum sample.exe 被加密文件 # 存证（[[re-triage]]） file 被加密文件 # 文件头是否被改写/替换 xxd -l 64 被加密文件 # 头部特征：固定前缀=感染 ID/密钥块，尾部特征同理 find / -xdev -iname "*README*" -o -iname "*DECRYPT*" -o -iname "*RECOVER*" 2>/dev/null find . -type f -mmin -60 -size +1k | head # 加密时间窗内被改动的文件- 判定信号：扩展名批量变化（.crypt/.locker/.encrypted）、原文件被删/被覆盖、目录出现勒索信、桌面壁纸被换
- 先给受害者文件整体哈希/目录清单留底（与快照互为备份）
加密算法识别（走 crypto 域）：
- 对样本静态分析: [[re-crypto-id]]——常量表指纹（AES S-box / RSA 公钥 DER / CRC 表）、XOR/ROL/ROR 变换、是否混合加密（RSA 包 AES key 最常见）
- 对密文观察: 头部/尾部固定块（感染 ID、密钥块）、密文长度对齐（AES 块长 16）、熵（>7.0 → 加密/压缩/高随机性候选，需结合文件头与上下文佐证——高熵本身不是加密判定）
- 判定三选一：对称（AES 整文件）→ 找对称密钥；非对称（RSA 直接加密）→ 几乎不可恢复；混合（RSA 加密 AES key）→ 密钥块随文件保存则看步骤 3
- 结论（算法假设 + 证据）传给步骤 3/5
密钥管理还原（本地 / 网络 / C2 分发）：
- 本地: [[re-crypto-keys]] 静态优先（strings/硬编码/资源/导入表）→ 没有再上内存（[[re-memdump]] 默认转储 gcore；转储时机 = 加密循环执行中，密钥已派生未销毁）
- 网络/C2 下发: 沙箱内 [[re-sandbox]]（INetSim/fake DNS）+ [[re-netcap]] 抓包，[[re-protocol]] 重建——密钥可能只在运行时由 C2 下发，静态拿不到
- 混合模型: 样本内含 RSA 公钥、AES key 被加密写进文件头 → 无私钥不可恢复（诚实告知，见 [[re-crypto-keys]] 坑）
- 每枚候选密钥记录来源证据（偏移/函数名/转储路径），供 [[re-crypto-decrypt]] 使用
勒索信与 C2 交互（走 [[re-protocol]]）：
- 读勒索信: 提取邮箱 / URL（Tor/暗网）/ BTC 地址 / 感染 ID → 记入 IOC（[[re-ioc]]）
- C2 交互: [[re-protocol]] 编排——[[re-netcap]] 抓包 → [[re-crypto-id]] 判定密文 → [[re-crypto-keys]] 取密钥 → [[re-crypto-decrypt]] 解密流量 → [[re-proto-rev]] 重建交互（密钥上传/状态上报/感染 ID 注册）
- 重点关注: 加密前是否先上传数据（双重勒索，坑 2）、密钥是否回传 C2
恢复思路（密钥提取 → 解密脚本；无密钥 → 社区工具）：
- 有密钥: [[re-crypto-decrypt]] 写批量解密脚本（算法/模式/IV 按 [[re-crypto-id]] 结论重放）→ 先小样本验证出明文 → 全量执行
- 部分加密/头部加密: 只加密头部几 KB 或部分块 → 截掉头部/重建文件头即可恢复多数文件（先检查密文长度是否 = 原长，是最便宜的路径）
- 无密钥: ID Ransomware 识别家族 → No More Ransom / 厂商解密器（必须匹配变体，坑 4）→ 失效则诚实报告"当前不可恢复"
- 快照/备份恢复优先: vssadmin / snapper / Time Machine 回滚（注意样本可能先删卷影，检查是否被删）
- 产出: 恢复可行性结论 + 解密脚本 + 证据链（[[re-ioc]] 报告结构）
Show full SKILL.md (54 more words)Show less
跨域联合
- [[re-crypto-id]] / [[re-crypto-keys]] / [[re-crypto-decrypt]]：步骤 2/3/5 分别引用，构成加密识别→密钥→解密主链
- [[re-sandbox]] / [[re-behavior]]：动态分析强制前置（[[re-analyze/platform-tips]] 最高原则）与加密/外传行为观察
- [[re-protocol]]：勒索信背后的 C2 交互（netcap / crypto-* / proto-rev），步骤 4
- [[re-ti]]：样本哈希/家族识别（VT、ID Ransomware）
- [[re-ioc]]：勒索信邮箱/URL/钱包地址、密钥与密文指纹出 IOC
- [[re-malware]]：本技能由 re-malware 网关引用（勒索样本分支）；行为分析/报告走网关全流程
- [[re-analyze/platform-tips]] 相关分支：默认沙箱（加密行为破坏性强）、静态优先、平台分支（Linux 用 snapper、Windows 用 vssadmin）
常见坑与陷阱
- 样本在沙箱内加密所有文件：现象——样本一跑，沙箱里全盘文件被加密，包括样本自身与行为日志，取证产物被毁；原因——未做文件系统快照/蜜罐隔离就运行，或分析完没恢复快照；对策——[[re-sandbox]] 快照 + 蜜罐文件夹（放假文档/假密钥，观察加密目标选择）+ 只读传入样本，分析完立即恢复快照（坑清单见 [[re-sandbox]]）；原始样本与密文副本在宿主机独立备份
- 双重勒索（数据泄露 + 加密）：现象——勒索信同时威胁"加密文件 + 公开泄露数据"，只盯加密会漏掉外传阶段；原因——双重勒索模式：先窃取数据（C2 上传）再加密，赎金诉求双份；对策——[[re-behavior]] / [[re-netcap]] 优先观察网络外传（泄露影响面大于加密），分两阶段记录行为与 IOC，报告分开陈述
- RaaS 变体差异：现象——同家族不同样本加密扩展名/算法/密钥方案都不一样，套用家族通用结论出错；原因——RaaS（勒索软件即服务）向攻击者出租可定制变体，每租户可配置；对策——以手头样本实测为准（[[re-crypto-id]] 重新确认），记录样本级特征（样本哈希/密钥块指纹）而非家族级结论
- 解密工具时效性：现象——No More Ransom 解密器报"不是此变体"或解出乱码；原因——解密器只覆盖特定变体/旧版本，新变体算法或密钥方案已变；对策——先用 ID Ransomware + 样本哈希精确匹配变体再选工具；失效就走密钥提取路线（步骤 3/5）或诚实报告不可恢复；工具随 C2 密钥泄漏更新，可定期复查
© dslsdzc, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .claude/skills/re-ransomware of dslsdzc/rev-skills.
Open the folder on GitHubat commit bd21db8
Compare with similar skills
Re Ransomware next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Re Ransomware this skilldslsdzc/rev-skills | 130 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | |
| Fla Ascend Performancefla-org/flash-linear-attention | 5.8k | — | ~6.3k | Automated safety check: Pass | MIT | |
| Deepsec Documentation Guidevercel-labs/deepsec | 8.1k | — | ~956 | Automated safety check: Pass | Apache-2.0 | |
| Skill Scannergetsentry/skills | 1k | 4 repos | ~2.5k | Automated safety check: Warn | Apache-2.0 | |
| Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit | 481 | 1 repos | ~3.3k | Automated safety check: Pass | None | |
| Security Alert Triageelastic/agent-skills | 592 | 1 repos | ~3.5k | Automated safety check: Notes | Apache-2.0 |
Similar skills
- Official
Deepsec Documentation Guide
vercel-labs/deepsec
Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.
- Official
Skill Scanner
getsentry/skills
Scan agent skills for security issues. An agent skill from getsentry/skills.
Serenity Aleabitoreddit
yan-labs/serenity-aleabitoreddit
Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.
- Official
Security Alert Triage
elastic/agent-skills
Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.
Shiro Attack CLI
SummerSec/ShiroAttack2
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…
More from dslsdzc/rev-skills
All 40 skills in this repoRuntime Memory Sample Acquisition
dslsdzc/rev-skills
Captures an analyzable sample from a live system when the target leaves no file on disk, by finding abnormal executable memory and the execution context that reached it.
APK Static Analysis
dslsdzc/rev-skills
Guides static analysis of an Android APK with jadx and apktool: reading the manifest, Java code, resources and permissions, and recognizing hardening or obfuscation.
Re Attribution
dslsdzc/rev-skills
威胁归因方法论：钻石模型、基础设施图谱、置信度分级与归因报告. An agent skill from dslsdzc/rev-skills.
Re Format Elf
dslsdzc/rev-skills
ELF 格式解析：ehdr/phdr/shdr、GOT/PLT、initarray、符号恢复. An agent skill from dslsdzc/rev-skills.
Re Fp Runtime
dslsdzc/rev-skills
函数式语言运行时逆向（Haskell/OCaml）：闭包/堆对象模型、调用约定、数据流优先策略. An agent skill from dslsdzc/rev-skills.
Re Frida
dslsdzc/rev-skills
Frida 动态插桩（桌面+移动统一）. An agent skill from dslsdzc/rev-skills.
Related
Categories
Questions about Re Ransomware
What does Re Ransomware do?
勒索软件分析：加密识别、勒索信、解密恢复思路. An agent skill from dslsdzc/rev-skills. Re Ransomware is an agent skill from dslsdzc/rev-skills.
When should I use Re Ransomware?
Re Ransomware fits situations like: security work in your project.
How do I install Re Ransomware in Claude Code?
Run `npx skills add dslsdzc/rev-skills --skill re-ransomware -a claude-code`. Or copy the skill folder (.claude/skills/re-ransomware in dslsdzc/rev-skills) into .claude/skills/re-ransomware in your project. Claude Code loads it when a task matches its description.
How do I install Re Ransomware in Codex?
Run `npx skills add dslsdzc/rev-skills --skill re-ransomware -a codex`. Or copy the skill folder (.claude/skills/re-ransomware in dslsdzc/rev-skills) into .agents/skills/re-ransomware in your project. Codex loads it when a task matches its description.
Can I use Re Ransomware in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add dslsdzc/rev-skills --skill re-ransomware -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/re-ransomware, .gemini/skills/re-ransomware, .github/skills/re-ransomware and .opencode/skills/re-ransomware in your project.
What does Re Ransomware need to run?
Going by SKILL.md and its folder, Re Ransomware needs the command-line tools its instructions call (python3, apt and dnf). Our summary lists: Python 3.
Does Re Ransomware access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Re Ransomware safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Re Ransomware use?
Re Ransomware is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Re Ransomware use?
About 1.2k tokens (SKILL.md is roughly 4.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Re Ransomware?
Skills that share tags, products or a category with Re Ransomware: Fla Ascend Performance (fla-org/flash-linear-attention, 5.8k stars), Deepsec Documentation Guide (vercel-labs/deepsec, 8.1k stars), Skill Scanner (getsentry/skills, 1k stars) and Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 481 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Re Ransomware?
dslsdzc (a GitHub user) maintains it in dslsdzc/rev-skills, which has 130 GitHub stars. The repository holds 40 skills in this directory. The repository was last updated on October 5, 2026.
Source: dslsdzc/rev-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.