MIT 授權的 AI 代理逆向工程工具包（CLI + MCP）；README 未提及 DeepSeek Harness，透過標準 MCP 伺服器註冊的方式與 DSH 整合。
DSH 整合
相容
作者聲明
安全稽核
未稽核
最後核實
2026-08-21
授權條款
MIT
01它能幫你完成什麼？
Investigate how an application feature works — from app behavior down to native binaries — using an agent
Agent explanations of feature internals backed by pseudocode, strings, cross-references and call graphs, recorded as reproducible Evidence v2 records
Developers, security and interop engineers who want a coding agent to understand closed-source or undocumented software
Recreate an investigated feature in your own project during the same coding session
A version of the feature adapted to your stack, interface, and requirements, built by the agent with its normal file-editing tools
Product developers porting or reimplementing a feature whose source code they do not have
Analyze proprietary binaries locally without sending the app to a hosted service
Local decompilation, artifact inventory and observation results; evidence and snapshots stay on the local host
Teams handling proprietary or sensitive binaries that cannot leave the machine
02如何將外掛接入 DeepSeek Harness？
先決條件
- Node.js 22.19+ or 24.11+ (including newer releases) and npm
- macOS 12 or newer, Ubuntu 24.04+, Fedora 41+, or 64-bit Arch Linux (Windows x64 only for the experimental, Ghidra-only native PE P0 boundary)
- For deep binary analysis: Hopper (separate desktop application with its own license) or a bring-your-own Ghidra 12.1.2 installation with 64-bit JDK 21 on Linux x64
- An MCP-capable agent (e.g. DeepSeek Harness) — setup auto-detects Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI and Windsurf; other agents use manual MCP configuration
安裝步驟
- 01
Install the CLI globally: `npm install --global rea-agents` (or run without installing via `npx --yes rea-agents@latest setup`)
$ npm install --global rea-agents
- 02
Run `rea setup` (or `npx --yes rea-agents@latest setup`), review the printed plan, and choose Agent Integration — REA installs the pinned MCP registration and its matching routing skill as one transaction
$ npx --yes rea-agents@latest setup
- 03
Restart the configured agent so it loads REA
- 04
For agents not auto-detected (e.g. DeepSeek Harness), add the manual MCP config: `{ "mcpServers": { "rea": { "command": "npx", "args": ["-y", "rea-agents@3.1.0", "mcp"] } } }`
驗證整合成功
- Run `rea doctor` (or `npx -y rea-agents@latest doctor`): a read-only diagnostic that distinguishes unsupported hosts, missing dependencies, a missing local analysis engine, configuration drift, and healthy checks
- After a successful setup, REA reports the capabilities now ready to use and a concrete next step, and only claims an integration is ready when setup's final diagnostic check verified it
復原
- `rea uninstall` removes only REA-owned MCP registrations and the managed skill (`--purge-data` also removes ~/.rea/cache and ~/.rea/state); Hopper, Node.js, evidence, unrelated skills and other MCP servers are preserved
03DSH 整合程度與能力邊界
Standard MCP server registered via manual mcpServers config (`npx -y rea-agents@<version> mcp`); the README does not mention DeepSeek Harness, so integration is generic MCP rather than an officially documented DSH plugin.
Native binary analysis via Hopper / Ghidra
Mach-O, ELF, PE, .app, ZIP, APK, IPA, ASAR, plist, JavaScript and source-map targets→Pseudocode, assembly, strings, names, callers/callees, xrefs, call graphs and bounded function dossiers
Launches and controls Hopper (or a caller-selected Ghidra bridge) locally; Hopper may come to the foregroundWrites Evidence v2 records and optional analysis snapshots to operator-approved local rootsJavaScript / Electron / browser observation
Local JavaScript/Electron app directories or ASAR archives; a user-owned Chrome-family browser on a loopback CDP endpoint→Static application mapping without execution, passive CDP page capture, and bounded source-map reconstruction
Browser and V8 Inspector observation are disabled by default and require explicit environment-variable approvalPlaywright scenario capture is a separately approved, explicitly mutating boundaryReproducible Evidence v2 records
Every successful analysis result→Deterministic Evidence v2 bundles with artifact and provider identity, confidence, authority, limitations and locations; import/export/compare across sessions
Writes evidence bundles only to operator-approved absolute roots; imports never execute bundle contentSame workflows over CLI and MCP
Any agent that supports local MCP servers, or a terminal→Identical reverse-engineering workflows from CLI and MCP, six guided MCP prompt workflows, and setup that auto-configures Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI and Windsurf
`rea setup` writes additive, backup-first MCP registrations into detected agent configuration files
04適合誰？何時不該用？
適合
- Developers, security and interop engineers who want a coding agent to understand closed-source or undocumented software
- Product developers porting or reimplementing a feature whose source code they do not have
- Teams handling proprietary or sensitive binaries that cannot leave the machine
不適合
- Supported hosts are macOS 12+, Ubuntu 24.04+, Fedora 41+ or 64-bit Arch Linux; Windows x64 is limited to the experimental, Ghidra-only native PE P0 boundary, and some current workflows still require Hopper and macOS.
- Deep binary analysis requires a separate provider: Hopper (its own license, optionally installed by setup) or bring-your-own Ghidra 12.1.2 with JDK 21 — REA never downloads Ghidra or installs Java.
- REA's shipped providers, passive observers and Process Capture are not security sandboxes — providers and launched targets run with the current user's permissions; dynamic capabilities are disabled by default and require operator policy plus explicit per-call approval.
05相容性、維護與安全提醒
- Supported hosts are macOS 12+, Ubuntu 24.04+, Fedora 41+ or 64-bit Arch Linux; Windows x64 is limited to the experimental, Ghidra-only native PE P0 boundary, and some current workflows still require Hopper and macOS.
- Deep binary analysis requires a separate provider: Hopper (its own license, optionally installed by setup) or bring-your-own Ghidra 12.1.2 with JDK 21 — REA never downloads Ghidra or installs Java.
- REA's shipped providers, passive observers and Process Capture are not security sandboxes — providers and launched targets run with the current user's permissions; dynamic capabilities are disabled by default and require operator policy plus explicit per-call approval.
MIT · actively maintained (latest release rea-agents-3.1.0, 2026-08-09)
06常見問題
REA 如何接入 DeepSeek Harness？
README 沒有針對 DeepSeek Harness 的專屬整合說明，但 REA 是標準 MCP 伺服器，任何支援本機 MCP 伺服器的代理都能使用。執行 `npx --yes rea-agents@latest setup` 並選擇 Agent Integration，或手動加入指向 `npx rea-agents mcp` 的 mcpServers 設定，然後重新啟動代理即可。
需要哪些先決條件？
Node.js 22.19+ 或 24.11+ 與 npm；系統需 macOS 12+、Ubuntu 24.04+、Fedora 41+ 或 64 位元 Arch Linux（Windows x64 僅限實驗性的 Ghidra PE 邊界）。深度二進位分析還需要 Hopper（單獨授權）或自備 Ghidra 12.1.2 + JDK 21。
REA 會把我的應用程式上傳到雲端嗎？
不會。REA 沒有託管分析服務，所有 provider 都在本機分析成品（artifact）並擷取行為。不過你的代理或模型供應商可能有自己的資料政策，需要另行確認。
能還原出原始原始碼嗎？
任何反編譯器都無法保證還原原始原始碼。REA 向代理提供偽代碼、組譯碼、符號、字串、中繼資料與關係，讓代理據此解釋行為或相容地重建功能。
如何驗證安裝成功？
執行 `npx -y rea-agents@latest doctor`——這是唯讀診斷，能區分不支援的主機、缺少相依套件、缺少本機分析引擎、設定漂移與健康檢查。
07相關的 DSH 工作流程
ruflo
作者 ruvnet
原版智慧體元框架（meta-harness）：支援多智慧體叢集部署、自主工作流編排與對話式 AI 系統構建，內建自適應記憶、自學習智慧與 RAG 檢索，原生整合 Claude Code / Codex / Hermes 等大量工具。
reactive-resume
作者 amruthpillai
注重隱私的開源簡歷生成器，安全、可定製、可移植，永久免費，支援自託管。
everos
作者 evermind-ai
為所有 AI 智慧體提供的便攜統一記憶層，本地優先、Markdown 原生、資料歸使用者所有，跨應用與工作流自進化。
yao
作者 yaoapp
在桌面、移動端、瀏覽器或 API 上統一管理你的智慧體與工作區，看板式任務追蹤，支援自託管。
08資料與來源
Any agent that supports local MCP servers can use REA with the configuration below.
"args": ["-y", "rea-agents@3.1.0", "mcp"]
此頁面根據專案公開文件、儲存庫中繼資料與 DSH Plugins 的結構化解析所產生；最後核實於 2026-08-21。發現錯誤？提交更正。
最佳 DeepSeek Harness 外掛
從全目錄挑出的 12 個值得優先安裝的外掛，涵蓋各個分類。