[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71KBKY1TCKKJS7R9DQ5MH1E":3,"skill-same:01M71KBKY1TCKKJS7R9DQ5MH1E":95},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":28,"publishedAt":49,"linkOnly":50,"markdownContent":51,"markdownBody":52,"frontMatter":53,"refName":58,"commitSha":59,"skillDirectory":60,"forksCount":61,"repositoryHtmlUrl":62,"repositoryHomepageUrl":63,"ownerHtmlUrl":64,"ownerBlogUrl":65,"ownerDescription":66,"updatedAt":67,"install":68,"resources":80},"01M71KBKY1TCKKJS7R9DQ5MH1E","dotnet-reverse",null,".NET \u002F C# 二进制逆向。当目标是 .NET assembly（PE 头含 CLR、.exe\u002F.dll 托管程序）、C# 编译产物（含 NativeAOT）、红队 Sharp* 工具（Rubeus \u002F SharpHound \u002F SharpHound 等）、.NET 混淆程序（ConfuserEx \u002F SmartAssembly \u002F Babel \u002F Eazfuscator）、.NET loader \u002F info-stealer \u002F 套壳 malware 时使用。优先用 dnSpyEx + de4dot，需要 AI 直接操作时联动 dnSpy MCP。不用于纯 native 二进制（走 reverse-engineering \u002F ida-reverse）。","coco-research\u002Fcoco","coco-research","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F68911604?v=4","01M71JRE9C4NM4NSZM4JD0BJTB","Coco Research","01M71JREA0ZMR0PMH3CKA99SN1",631,"MIT","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fdotnet-reverse\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],"dotnet","reverse","dotnet reverse","mono","babel","websearch","sharp","native","host","false","clr","MCP","info","read","access","Bash","sharphound","reverse-engineering","code","cli","2026-11-10 10:12:30",false,"---\nname: dotnet-reverse\ndescription: .NET \u002F C# 二进制逆向。当目标是 .NET assembly（PE 头含 CLR、.exe\u002F.dll 托管程序）、C# 编译产物（含 NativeAOT）、红队 Sharp* 工具（Rubeus \u002F SharpHound \u002F SharpHound 等）、.NET 混淆程序（ConfuserEx \u002F SmartAssembly \u002F Babel \u002F Eazfuscator）、.NET loader \u002F info-stealer \u002F 套壳 malware 时使用。优先用 dnSpyEx + de4dot，需要 AI 直接操作时联动 dnSpy MCP。不用于纯 native 二进制（走 reverse-engineering \u002F ida-reverse）。\nlicense: MIT\ncompatibility: Requires a filesystem-based code agent or CLI with shell access, Windows host preferred (dnSpyEx 是 Windows GUI)；Linux\u002FmacOS 可用 ILSpy\u002Fde4dot CLI + mono\u002Fdotnet runtime。\nallowed-tools: Bash Read Write Edit Glob Grep Task WebFetch WebSearch\nmetadata:\n  user-invocable: \"false\"\nuser-invocable: true\n---\n\n# .NET \u002F C# 逆向作业规范\n\n## 适用范围\n\n当任务属于以下场景时优先使用本 skill：\n\n- 识别并逆向 .NET \u002F C# 编译产物（托管 PE \u002F .exe \u002F .dll）\n- 分析红队 Sharp* 工具链（Rubeus、SharpHound、SharpShell 等）\n- 脱混淆 ConfuserEx \u002F SmartAssembly \u002F Babel \u002F Eazfuscator \u002F .NET Reactor 等壳\n- 逆向 .NET loader \u002F info-stealer \u002F RAT 的解密与 C2 逻辑\n- 对 C# 程序做 patch（改判断、改常量、keygen）\n- 分析 IL2CPP 之前的 Mono\u002FUnity 托管层（注意：IL2CPP 编译后是 native，走 `reverse-engineering\u002F` + seed-014）\n\n如果目标是纯 native 二进制（C\u002FC++\u002FGo\u002FRust 编译、无 CLR），请改用 `reverse-engineering\u002F`、`ida-reverse\u002F` 或 `radare2\u002F`。\n\n## 核心原则\n\n- **先识别再下手**：先确认是 .NET 托管程序（PE 头 CLR + `#~` \u002F `#Strings` 流 + mscoree `_CorExeMain`），再决定走 dnSpy 而非 IDA\n- **IL 优先于 C#**：dnSpyEx 的 C# 反编译器会丢失\u002F扭曲信息（编译器生成的状态机、async\u002Fawait、yield），关键判断与 patch 必须切到 **IL 编辑器**，C# 视图只用于快速浏览\n- **de4dot 先行**：遇到混淆器先 `de4dot` 脱一轮再做静态分析，否则字符串\u002F控制流全是乱的\n- **MCP 联动**：环境里若注册了 dnSpy MCP（`dnspy_*` 工具），优先走 MCP 面做 decompile \u002F IL inspection，避免来回切 GUI\n- **证据化输出**：脱混淆产物、提取的配置\u002FC2\u002Fkey、patch diff 都要落盘\n\n## 工具链映射\n\n| 能力 | 首选 | 备注 |\n|------|------|------|\n| 反编译 + 调试 + patch | **dnSpyEx** | 王牌，唯一带 IL 编辑器的 GUI；老 dnSpy 已停更，用 Ex 分支 |\n| 轻量 CLI \u002F headless 反编译 | **ILSpy** (`ilspycmd`) | 适合批量、脚本化、Linux\u002FmacOS |\n| 脱混淆 | **de4dot** | ConfuserEx 全家桶、SmartAssembly 等主流壳的默认解 |\n| 混淆器识别 | **Detect It Easy (DIE)** \u002F **file** | 先判断壳类型再决定 de4dot 参数 |\n| 编程化操作 IL | **dnlib** | 写 C# 脚本批量改 metadata \u002F 字符串解密器 |\n| AI 直接操作 | **dnSpy MCP** | `dnspy_decompile` \u002F `dnspy_inspect_il` 等工具面 |\n\n> 前置：Windows 主机装 dnSpyEx + de4dot（choco 或 release）；Linux\u002FmacOS 用 `ilspycmd` + `dotnet runtime`。详见 `references\u002Fsharp-tools.md` 的安装矩阵。\n\n## 六阶段工作流\n\n### 1. Identify（识别 .NET）\n\n确认目标是托管程序，别把 native PE 当 .NET 分析：\n\n```powershell\n# Windows\nfile target.exe                       # \"PE32 executable ... for MS Windows\" 不够\n# 关键：看有没有 CLR\npowershell -c \"[System.Reflection.AssemblyName]::GetAssemblyName('target.exe')\"\n# 或\ndnSpyEx 直接拖进去 —— 能打开就是托管\n\n# 通用\nstrings target.exe | grep -iE \"mscoree|_CorExeMain|mscorlib|System\\\\.\"\n```\n\n**.NET 识别标志：**\n- PE 头 `Data Directory[14]` (CLR Runtime Header) 非零\n- `mscoree.dll` 导入 \u002F `_CorExeMain` 入口\n- `#~`、`#Strings`、`#US`、`#GUID`、`#Blob` metadata 流\n- `mscorlib` \u002F `System.Private.CoreLib` 字符串\n\n**NativeAOT 例外：** 编译成 native，没有 CLR 头，但有 `System.Private.CoreLib` 字符串和重构过的类型元数据 —— 这类走 `reverse-engineering\u002F`（IDA\u002Fr2），本 skill 仅做识别提示。\n\n### 2. Detect（检测混淆器）\n\n```powershell\n# DIE 快速识别\ndiec target.exe                        # Detect It Easy CLI\n# 或拖进 dnSpyEx，看是否大量乱码类名 \u002F 控制流变形\n```\n\n常见混淆器 → 脱壳策略（详见 `references\u002Fobfuscators.md`）：\n\n| 混淆器 | 特征 | de4dot 处理 |\n|--------|------|------------|\n| ConfuserEx (1.0.0 \u002F 2.x) | `\u003Cmodule>` anti-tamper、控制流变形、字符串加密 | `de4dot target.exe` 通常自动识别 |\n| SmartAssembly | `circular`\u002F`string encoding`、资源压缩 | `de4dot target.exe` |\n| Babel.NET | 方法体加密、控制流 | `de4dot target.exe` |\n| Eazfuscator.NET | 字符串\u002F资源加密 | `de4dot`，部分版本需手动 |\n| .NET Reactor | anti-tamper + necrobit | `de4dot`，新版可能失败需手动 |\n\n### 3. Deobfuscate（脱混淆）\n\n```powershell\n# de4dot 默认自动识别大多数壳\nde4dot target.exe -o target-clean.exe\n\n# 指定类型（自动识别失败时）\nde4dot --type cfze target.exe          # ConfuserEx\nde4dot --type sa target.exe            # SmartAssembly\n\n# 多层混淆 \u002F de4dot 报 unknown\nde4dot --detect target.exe             # 看它识别成什么\n# 可能要先 patch anti-tamper 再 de4dot（见 references\u002Fobfuscators.md）\n```\n\n产出：`target-clean.exe`，后续分析用它。**保留原始样本**做对照。\n\n### 4. Static Analyze（静态分析）\n\ndnSpyEx 加载脱壳后样本：\n\n- **C# 视图**：快速浏览类结构、方法签名、字符串（用于定位）\n- **IL 视图**：关键判断、加密逻辑、状态机必须看 IL（右键 → Edit IL 或 IL 视图）\n- 找入口：`Main` \u002F `Startup` \u002F 模块初始化器 (`Module .cctor`)\n- 找关键逻辑：搜 `flag`、`password`、`verify`、`check`、`encrypt`、`http`、`Config`\n\n```text\n定位字符串 → 反向引用 → 找到使用它的方法 → IL 视图看判断逻辑\n```\n\n### 5. Dynamic（动态调试）\n\ndnSpyEx 调试器：附加进程 \u002F 启动调试，在关键方法下断点，观察运行时：\n- 解密后的明文字符串（很多混淆器的字符串在运行时才解密）\n- C2 地址、配置解密结果\n- 异常驱动的控制流（anti-debug 常用 `try\u002Fcatch` 隐藏真实路径）\n\n> .NET 动态调试比 native 友好得多 —— 能直接看到对象值、字符串内容。优先动态而非死磕静态。\n\n### 6. Patch（按需修改）\n\n```text\ndnSpyEx → 右键方法 → Edit Method (C#) 或 Edit IL\n  - 改判断：ldc.i4.0 → ldc.i4.1（false→true）\n  - 改常量：直接编辑字符串\u002F数字\n  - 删除校验：nop 掉整段\nFile → Save Module → 替换原文件\n```\n\n**IL patch 可靠性 > C# patch**：C# 重编译可能失败（缺引用、语法不对），IL 编辑几乎不会失真。详见 `references\u002Fcommon-workflow.md`。\n\n## 触发场景路由\n\n用户说这些时进入本 skill：\n- \".NET \u002F C# 二进制逆向\" \u002F \"C# 程序反编译\"\n- \"dnSpy 分析\" \u002F \"dnSpyEx patch\"\n- \"ConfuserEx \u002F SmartAssembly \u002F Babel 脱混淆 \u002F 脱壳\"\n- \"Sharp* 工具分析\"（Rubeus \u002F SharpHound \u002F SharpShell）\n- \".NET malware \u002F loader \u002F info-stealer 逆向\"\n- \"C# 程序 patch \u002F keygen \u002F 修改判断\"\n\n## 何时切出\n\n- IL2CPP 编译的 Unity 游戏 → `reverse-engineering\u002F` + `seed-014_unity-il2cpp-reverse.md`（IL2CPP 是 native，不走 dnSpy）\n- NativeAOT 产物 → `reverse-engineering\u002F`（同上，native）\n- 纯 native PE（无 CLR）→ `reverse-engineering\u002F` \u002F `ida-reverse\u002F`\n- 需要符号\u002F函数批量迁移到别的版本 → `binary-diff\u002F`\n- 需要画攻击路径 \u002F 调用链图 → `diagram-generator\u002F`\n\n## 参考文档\n\n- [references\u002Fobfuscators.md](references\u002Fobfuscators.md) — ConfuserEx \u002F SmartAssembly \u002F Babel \u002F Eazfuscator \u002F .NET Reactor 脱混淆详解 + anti-tamper 绕过\n- [references\u002Fcommon-workflow.md](references\u002Fcommon-workflow.md) — 完整工作流、IL patch 可靠性、字符串解密器提取、状态机识别\n- [references\u002Fsharp-tools.md](references\u002Fsharp-tools.md) — 红队 Sharp* 工具分析、工具安装矩阵、dnSpy MCP 集成、社区资源索引\n","# .NET \u002F C# 逆向作业规范\n\n## 适用范围\n\n当任务属于以下场景时优先使用本 skill：\n\n- 识别并逆向 .NET \u002F C# 编译产物（托管 PE \u002F .exe \u002F .dll）\n- 分析红队 Sharp* 工具链（Rubeus、SharpHound、SharpShell 等）\n- 脱混淆 ConfuserEx \u002F SmartAssembly \u002F Babel \u002F Eazfuscator \u002F .NET Reactor 等壳\n- 逆向 .NET loader \u002F info-stealer \u002F RAT 的解密与 C2 逻辑\n- 对 C# 程序做 patch（改判断、改常量、keygen）\n- 分析 IL2CPP 之前的 Mono\u002FUnity 托管层（注意：IL2CPP 编译后是 native，走 `reverse-engineering\u002F` + seed-014）\n\n如果目标是纯 native 二进制（C\u002FC++\u002FGo\u002FRust 编译、无 CLR），请改用 `reverse-engineering\u002F`、`ida-reverse\u002F` 或 `radare2\u002F`。\n\n## 核心原则\n\n- **先识别再下手**：先确认是 .NET 托管程序（PE 头 CLR + `#~` \u002F `#Strings` 流 + mscoree `_CorExeMain`），再决定走 dnSpy 而非 IDA\n- **IL 优先于 C#**：dnSpyEx 的 C# 反编译器会丢失\u002F扭曲信息（编译器生成的状态机、async\u002Fawait、yield），关键判断与 patch 必须切到 **IL 编辑器**，C# 视图只用于快速浏览\n- **de4dot 先行**：遇到混淆器先 `de4dot` 脱一轮再做静态分析，否则字符串\u002F控制流全是乱的\n- **MCP 联动**：环境里若注册了 dnSpy MCP（`dnspy_*` 工具），优先走 MCP 面做 decompile \u002F IL inspection，避免来回切 GUI\n- **证据化输出**：脱混淆产物、提取的配置\u002FC2\u002Fkey、patch diff 都要落盘\n\n## 工具链映射\n\n| 能力 | 首选 | 备注 |\n|------|------|------|\n| 反编译 + 调试 + patch | **dnSpyEx** | 王牌，唯一带 IL 编辑器的 GUI；老 dnSpy 已停更，用 Ex 分支 |\n| 轻量 CLI \u002F headless 反编译 | **ILSpy** (`ilspycmd`) | 适合批量、脚本化、Linux\u002FmacOS |\n| 脱混淆 | **de4dot** | ConfuserEx 全家桶、SmartAssembly 等主流壳的默认解 |\n| 混淆器识别 | **Detect It Easy (DIE)** \u002F **file** | 先判断壳类型再决定 de4dot 参数 |\n| 编程化操作 IL | **dnlib** | 写 C# 脚本批量改 metadata \u002F 字符串解密器 |\n| AI 直接操作 | **dnSpy MCP** | `dnspy_decompile` \u002F `dnspy_inspect_il` 等工具面 |\n\n> 前置：Windows 主机装 dnSpyEx + de4dot（choco 或 release）；Linux\u002FmacOS 用 `ilspycmd` + `dotnet runtime`。详见 `references\u002Fsharp-tools.md` 的安装矩阵。\n\n## 六阶段工作流\n\n### 1. Identify（识别 .NET）\n\n确认目标是托管程序，别把 native PE 当 .NET 分析：\n\n```powershell\n# Windows\nfile target.exe                       # \"PE32 executable ... for MS Windows\" 不够\n# 关键：看有没有 CLR\npowershell -c \"[System.Reflection.AssemblyName]::GetAssemblyName('target.exe')\"\n# 或\ndnSpyEx 直接拖进去 —— 能打开就是托管\n\n# 通用\nstrings target.exe | grep -iE \"mscoree|_CorExeMain|mscorlib|System\\\\.\"\n```\n\n**.NET 识别标志：**\n- PE 头 `Data Directory[14]` (CLR Runtime Header) 非零\n- `mscoree.dll` 导入 \u002F `_CorExeMain` 入口\n- `#~`、`#Strings`、`#US`、`#GUID`、`#Blob` metadata 流\n- `mscorlib` \u002F `System.Private.CoreLib` 字符串\n\n**NativeAOT 例外：** 编译成 native，没有 CLR 头，但有 `System.Private.CoreLib` 字符串和重构过的类型元数据 —— 这类走 `reverse-engineering\u002F`（IDA\u002Fr2），本 skill 仅做识别提示。\n\n### 2. Detect（检测混淆器）\n\n```powershell\n# DIE 快速识别\ndiec target.exe                        # Detect It Easy CLI\n# 或拖进 dnSpyEx，看是否大量乱码类名 \u002F 控制流变形\n```\n\n常见混淆器 → 脱壳策略（详见 `references\u002Fobfuscators.md`）：\n\n| 混淆器 | 特征 | de4dot 处理 |\n|--------|------|------------|\n| ConfuserEx (1.0.0 \u002F 2.x) | `\u003Cmodule>` anti-tamper、控制流变形、字符串加密 | `de4dot target.exe` 通常自动识别 |\n| SmartAssembly | `circular`\u002F`string encoding`、资源压缩 | `de4dot target.exe` |\n| Babel.NET | 方法体加密、控制流 | `de4dot target.exe` |\n| Eazfuscator.NET | 字符串\u002F资源加密 | `de4dot`，部分版本需手动 |\n| .NET Reactor | anti-tamper + necrobit | `de4dot`，新版可能失败需手动 |\n\n### 3. Deobfuscate（脱混淆）\n\n```powershell\n# de4dot 默认自动识别大多数壳\nde4dot target.exe -o target-clean.exe\n\n# 指定类型（自动识别失败时）\nde4dot --type cfze target.exe          # ConfuserEx\nde4dot --type sa target.exe            # SmartAssembly\n\n# 多层混淆 \u002F de4dot 报 unknown\nde4dot --detect target.exe             # 看它识别成什么\n# 可能要先 patch anti-tamper 再 de4dot（见 references\u002Fobfuscators.md）\n```\n\n产出：`target-clean.exe`，后续分析用它。**保留原始样本**做对照。\n\n### 4. Static Analyze（静态分析）\n\ndnSpyEx 加载脱壳后样本：\n\n- **C# 视图**：快速浏览类结构、方法签名、字符串（用于定位）\n- **IL 视图**：关键判断、加密逻辑、状态机必须看 IL（右键 → Edit IL 或 IL 视图）\n- 找入口：`Main` \u002F `Startup` \u002F 模块初始化器 (`Module .cctor`)\n- 找关键逻辑：搜 `flag`、`password`、`verify`、`check`、`encrypt`、`http`、`Config`\n\n```text\n定位字符串 → 反向引用 → 找到使用它的方法 → IL 视图看判断逻辑\n```\n\n### 5. Dynamic（动态调试）\n\ndnSpyEx 调试器：附加进程 \u002F 启动调试，在关键方法下断点，观察运行时：\n- 解密后的明文字符串（很多混淆器的字符串在运行时才解密）\n- C2 地址、配置解密结果\n- 异常驱动的控制流（anti-debug 常用 `try\u002Fcatch` 隐藏真实路径）\n\n> .NET 动态调试比 native 友好得多 —— 能直接看到对象值、字符串内容。优先动态而非死磕静态。\n\n### 6. Patch（按需修改）\n\n```text\ndnSpyEx → 右键方法 → Edit Method (C#) 或 Edit IL\n  - 改判断：ldc.i4.0 → ldc.i4.1（false→true）\n  - 改常量：直接编辑字符串\u002F数字\n  - 删除校验：nop 掉整段\nFile → Save Module → 替换原文件\n```\n\n**IL patch 可靠性 > C# patch**：C# 重编译可能失败（缺引用、语法不对），IL 编辑几乎不会失真。详见 `references\u002Fcommon-workflow.md`。\n\n## 触发场景路由\n\n用户说这些时进入本 skill：\n- \".NET \u002F C# 二进制逆向\" \u002F \"C# 程序反编译\"\n- \"dnSpy 分析\" \u002F \"dnSpyEx patch\"\n- \"ConfuserEx \u002F SmartAssembly \u002F Babel 脱混淆 \u002F 脱壳\"\n- \"Sharp* 工具分析\"（Rubeus \u002F SharpHound \u002F SharpShell）\n- \".NET malware \u002F loader \u002F info-stealer 逆向\"\n- \"C# 程序 patch \u002F keygen \u002F 修改判断\"\n\n## 何时切出\n\n- IL2CPP 编译的 Unity 游戏 → `reverse-engineering\u002F` + `seed-014_unity-il2cpp-reverse.md`（IL2CPP 是 native，不走 dnSpy）\n- NativeAOT 产物 → `reverse-engineering\u002F`（同上，native）\n- 纯 native PE（无 CLR）→ `reverse-engineering\u002F` \u002F `ida-reverse\u002F`\n- 需要符号\u002F函数批量迁移到别的版本 → `binary-diff\u002F`\n- 需要画攻击路径 \u002F 调用链图 → `diagram-generator\u002F`\n\n## 参考文档\n\n- [references\u002Fobfuscators.md](references\u002Fobfuscators.md) — ConfuserEx \u002F SmartAssembly \u002F Babel \u002F Eazfuscator \u002F .NET Reactor 脱混淆详解 + anti-tamper 绕过\n- [references\u002Fcommon-workflow.md](references\u002Fcommon-workflow.md) — 完整工作流、IL patch 可靠性、字符串解密器提取、状态机识别\n- [references\u002Fsharp-tools.md](references\u002Fsharp-tools.md) — 红队 Sharp* 工具分析、工具安装矩阵、dnSpy MCP 集成、社区资源索引\n",{"name":5,"license":15,"metadata":54,"description":7,"allowed-tools":55,"compatibility":56,"user-invocable":57},{"user-invocable":38},"Bash Read Write Edit Glob Grep Task WebFetch WebSearch","Requires a filesystem-based code agent or CLI with shell access, Windows host preferred (dnSpyEx 是 Windows GUI)；Linux\u002FmacOS 可用 ILSpy\u002Fde4dot CLI + mono\u002Fdotnet runtime。",true,"main","cd89f013b617f7eea982a9bbc60e992974fda2aa","systems\u002Freverse-skill\u002Fskills\u002Fdotnet-reverse",15,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco","https:\u002F\u002Fcocoresearch.org\u002Fcoco\u002F","https:\u002F\u002Fgithub.com\u002Fcoco-research","https:\u002F\u002Fcocoresearch.org","Local-first, open-source tools for people who work with AI agents: governed memory, agents that check their own work, and data that stays on your machine.","2026-11-11 12:18:13",{"source":8,"skillName":5,"commands":69,"prompt":79,"zipAvailable":57},[70,73,76],{"tool":71,"command":72},"npx","npx skills add coco-research\u002Fcoco --skill dotnet-reverse",{"tool":74,"command":75},"bunx","bunx skills add coco-research\u002Fcoco --skill dotnet-reverse",{"tool":77,"command":78},"pnpm","pnpm dlx skills add coco-research\u002Fcoco --skill dotnet-reverse","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fdotnet-reverse\u002FSKILL.md",[81,87,91],{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fcommon-workflow.md","REFERENCE","参考文档",6785,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fdotnet-reverse\u002Freferences\u002Fcommon-workflow.md",{"path":88,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fobfuscators.md",5808,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fdotnet-reverse\u002Freferences\u002Fobfuscators.md",{"path":92,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fsharp-tools.md",6282,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fdotnet-reverse\u002Freferences\u002Fsharp-tools.md",[96,122,132,148,183,202],{"skillNo":97,"name":98,"nameZh":6,"description":99,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":100,"licenseFileUrl":6,"sourceHtmlUrl":101,"categories":102,"keywords":104,"publishedAt":49},"01M71KEJXF9KMT0BWCMRSRFA4M","trading-super-intelligence","Trading Super Intelligence Team. Named real-world personas across 8 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Ftrading\u002FSKILL.md",[103],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121],"super","trading super intelligence","intelligence","trading","validator","personas","local","composites","studio","team","across","world","first","gated","2026","lm studio","local-first",{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":100,"licenseFileUrl":6,"sourceHtmlUrl":126,"categories":127,"keywords":129,"publishedAt":49},"01M71KEFWS3CMAP7DF1P0FWTDE","strategy-super-intelligence","Strategy Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fstrategy\u002FSKILL.md",[128],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[130,105,131,107,109,110,111,112,113,114,115,116,117,118,119,120,121],"strategy","strategy super intelligence",{"skillNo":133,"name":134,"nameZh":6,"description":135,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":100,"licenseFileUrl":6,"sourceHtmlUrl":136,"categories":137,"keywords":142,"publishedAt":49},"01M71KED56ZEPK2QE84QSQPMT0","risk-compliance-super-intelligence","Risk & Compliance (GRC) Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Frisk-compliance\u002FSKILL.md",[138,139],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":140,"categoryName":141,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000037","律师与法务",[143,105,144,145,146,107,109,110,111,112,147,113,114,115,116,117,118,119,120,121],"risk","risk compliance super intelligence","compliance","risk compliance","grc",{"skillNo":149,"name":150,"nameZh":6,"description":151,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":100,"licenseFileUrl":6,"sourceHtmlUrl":152,"categories":153,"keywords":167,"publishedAt":49},"01M71KE9A2FWSC74VA96W1EZSN","product-design-super-intelligence","Your product + design brain trust and decision partner. Named personas across 8 cells spanning product strategy, discovery\u002Fresearch, growth\u002Fmetrics, design foundations\u002Fusability, design leadership\u002Fcraft, UX\u002Fcontent, design systems, and a…","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fproduct-design\u002FSKILL.md",[154,157,160,161,164],{"categoryNo":155,"categoryName":156,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":158,"categoryName":159,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":162,"categoryName":163,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000031","产品经理",{"categoryNo":165,"categoryName":166,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000032","设计师",[168,169,107,170,105,171,172,173,174,175,176,114,115,177,178,119,179,180,181,182],"design","product","product design","product design super intelligence","foundations","product-design","decision","design systems","usability","leadership","ux","brain","craft","metrics","trust",{"skillNo":184,"name":185,"nameZh":6,"description":186,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":100,"licenseFileUrl":6,"sourceHtmlUrl":187,"categories":188,"keywords":191,"publishedAt":49},"01M71KE6H9FPSD9TECYFBPXZ8Y","legal-ip-super-intelligence","Your legal, IP, and regulatory brain trust. 31 named personas across 7 cells covering patent strategy, tech licensing, regulatory litigation, AI governance, open-source compliance, privacy law, and antitrust.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Flegal-ip\u002FSKILL.md",[189,190],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":140,"categoryName":141,"taxonomyType":26,"taxonomyTypeDesc":27},[192,105,193,107,194,195,182,196,110,197,198,199,130,114,115,200,145,201,119,179],"ip","legal ip super intelligence","legal","sep","tech","litigation","ai governance","open","open-source","governance",{"skillNo":203,"name":204,"nameZh":6,"description":205,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":100,"licenseFileUrl":6,"sourceHtmlUrl":206,"categories":207,"keywords":209,"publishedAt":49},"01M71KE36QRY610V6YVB9JWRND","healthcare-life-sciences-super-intelligence","Your healthcare and life sciences brain trust. 25 named personas across 7 cells covering drug discovery, medtech, biotech strategy, health policy, genomics, clinical trials, and healthcare economics.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fhealthcare-life-sciences\u002FSKILL.md",[208],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[210,105,211,212,107,195,182,213,214,110,215,216,130,114,115,217,218,219,220,119],"healthcare","healthcare life sciences super intelligence","life","economics","discovery","policy","clinical","clinical trials","health","trials","genomics"]