{"slug":"shuvonsec-client-reverse","source_name":"shuvonsec/client-reverse","name":"Shuvonsec/Client Reverse","description":"Client-side request-signing and anti-bot token reversal for bug bounty — when a request carries a sign/sig/hmac/token/nonce/timestamp/X-Sensor header that Burp Repeater cannot replay, recover the signer just enough to reproduce the request outside the client. Packet-first staging (capture real request → prove replay works → only reverse if replay fails) across the locate→recover→runtime→validation→replay spine. Covers tracing backward from the signature field (writer→builder→entry→source), isola","version":1,"lift":{"pass_rate_delta_pts":36.36,"pass_rate_pct":72.7,"total_cases":22,"passed_cases":16,"tokens_delta_pct":174,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-29T01:07:17.505457+00:00"},"skill_score":0.7273,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":36.36,"with_pass_pct":72.7,"without_pass_pct":36.4,"tokens_delta_pct":174,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-29T01:07:17.505457+00:00","run_id":"3a785c62-8f67-4e2b-a070-1178aa8fba91","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"ccece2bbb858dfb7cbcceb359b217d9cce3727880751b3d796c97309987445f7","raw_url":"https://app.decimal.ai/s/shuvonsec-client-reverse/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/shuvonsec-client-reverse"}