aicodeking/leanrea

选用指南

AI 根据 README 整理 · 2026/10/17 18:46:09

使用方式

通过npx skills add命令安装到支持的AI代理（如Claude Code、Codex等），或手动复制SKILL.md到~/.claude/skills/目录，也可粘贴到代理的规则或系统提示中。

查看 README 依据

- Ghidra, Hopper and jadx weren't installed, so the native tasks ran on Xcode tools for both arms. - The plain model is already good at this. leanrea's gain over no skill (about 19% faster, 32% fewer turns) is smaller than its gain over REA. ## Install ```sh npx skills add aicodeking/leanrea ``` This uses the [skills CLI](https://skills.sh). It finds the `leanrea` skill and asks which agents to install it for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode and the others it supports. Common variants: ```sh

npx skills add aicodeking/leanrea -g # install for your user, in every project npx skills add aicodeking/leanrea -a claude-code -y # Claude Code only, no prompts npx skills add aicodeking/leanrea -g -a '*' -y # every supported agent, user level npx skills update leanrea # pull the latest version later ``` Manual install, if you prefer: ```sh git clone https://github.com/aicodeking/leanrea mkdir -p ~/.claude/skills && cp -R leanrea/leanrea ~/.claude/skills/ ```

If an agent has no skills support, paste `leanrea/SKILL.md` into its rules or system prompt; it is plain text. Use it: ``` /leanrea How does the search feature in Foo.app work? Show the evidence. ``` ## What's in the skill - **Rules:** - Work on a copy. - Route by `file` and magic bytes first. - Slice minified files instead of reading them. - Batch probes into one shell call. - Search extracted trees with `rg -uu`, because bundlers hide code in dot-folders like `.webpack/`. - Mark each claim as seen, inferred or unknown. - **Router:** the fastest command for each target type:

部署要求

需要支持skills的AI代理（如Claude Code），以及目标分析环境（如macOS）和必要的命令行工具（如otool、nm等）。

查看 README 依据

- Ghidra, Hopper and jadx weren't installed, so the native tasks ran on Xcode tools for both arms. - The plain model is already good at this. leanrea's gain over no skill (about 19% faster, 32% fewer turns) is smaller than its gain over REA. ## Install ```sh npx skills add aicodeking/leanrea ``` This uses the [skills CLI](https://skills.sh). It finds the `leanrea` skill and asks which agents to install it for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode and the others it supports. Common variants: ```sh

- **Speed patterns:** start from strings and imports, find a string's function through the otool literal-pool comments, read call sequences rather than every instruction, and diff inventories before diffing code. ## Reproduce the benchmark Needs macOS with the target Electron app installed (see `bench/setup.sh`), `gh` from Homebrew, Node, and Claude Code logged in. ```sh cd bench ./setup.sh # installs rea-agents@6.5.0, copies the targets into bench/work (gitignored) ./run_all.sh # 36 runs, about $8 on Sonnet ./ctx.sh # context-overhead probe

已知限制

基准测试仅使用3次重复、单一模型和单一机器；Ghidra、Hopper和jadx未安装，原生任务使用Xcode工具；答案键与特定应用版本和Go版本匹配，其他版本需要新键。

查看 README 依据

| Electron app analysis (real desktop app) | fails on asar integrity until you pass a flag, then **47.9 s and 140 MB of JSON** | asar extract + `rg -uu`: 4.8 s, 24 KB | Full tables, the context-overhead runs and caveats: [bench/BENCHMARK.md](bench/BENCHMARK.md). Raw per-run metrics: [bench/results/final.jsonl](bench/results/final.jsonl). **Caveats:** - Only 3 reps per cell, one model, one machine. - REA was tested in its best case: Claude Code's deferred tool search loads MCP tools on demand. Agents that load every tool pay the 400k-token row.

python3 mcp_list.py node work/rea-install/node_modules/rea-agents/scripts/rea.mjs --mcp # REA tool count + size ``` The answer keys in `tasks.json` match the app versions used here and a `gh` built with go1.27.1. Other versions need new keys. ## Credit REA is an impressive, well-documented project by the morluto team. Most of the gotchas in this skill came from reading their code and docs. leanrea isn't affiliated with REA. It is just a test of whether a model with plain tools and a short note can do the same work faster. MIT licensed.