pwntools is in the Kali bootstrap manifest (capabilities, canAutoInstall),
the Windows ToolDiscovery.ps1 catalog, and the generic
skills/scripts/refresh-tool-index.sh catalog, and the pwn-chain skill is
built entirely on it — but it was missing from kali/scripts/lib/
tool-discovery.sh, so the Kali refresh-tool-index.sh never reported its
path. Every sibling reverse-engineering CLI (binwalk, bkcrack, gdb) is
cataloged. Adds the entry, mirroring the Windows catalog (fallbacks
pwntools,pwn). Same parity fix as #137 (yara).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
yara is in the Kali bootstrap manifest and the Windows tool catalog and is
referenced by four skills, but was missing from kali/scripts/lib/tool-discovery.sh,
so refresh-tool-index.sh never reported its path on Kali. Add the catalog entry
(malware-analysis), matching its sibling analysis CLIs.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Keep reverse-skill a skill router, not a platform. RULES hot path is master-route then case-init then PRIMARY. MASTER-ROUTING priority is verified against routing.json. precedent-auth no longer grants. CTF is one R41 pointer, not 40 competition routes. open.ps1 never deletes .i64/.idb. Route-scope parse is line-anchored and last-match. Tests: 168 routing cases, parse-contracts, title-safety in CI.