Description
ghidra-reverse is an agent skill for reverse engineering binaries with Ghidra, a free and open tool. It covers Ghidra in headless mode for batch analysis and through its graphical interface. The main tasks it lists are decompiling functions, following cross-references, and running Ghidra scripts written in Java or Python, using Jython or PyGhidra. The skill is meant as the main reverse engineering route when no IDA license is available, when you prefer an open tool, or when you need batch analysis or decompilation inside a CI pipeline. It sets out a division of labor with IDA, so the agent knows which tool to use for which job. If Ghidra is not installed, the skill points to a bootstrap step for the Ghidra MCP server where the manifest supports it, or to manual installation steps. It also links to a binary diff workflow that uses ghidriff for comparing two versions of a file. A typical run imports a sample, lets Ghidra analyze it automatically, and exports the decompiled code of the key functions. Optional Ghidra MCP workflows let an agent drive the tool over the Model Context Protocol when IDA is unavailable. The skill is installed with the skills CLI. Its skills.sh page shows Gen Agent Trust Hub and Snyk passing and Socket with a warning.…
Highlights
- Reverse engineering with free, open Ghidra
- Headless batch analysis and GUI use
- Decompiles functions and follows cross-references
- Runs Ghidra scripts in Java or Python
- Optional Ghidra MCP workflows when IDA is unavailable
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate ghidra-reverse.
People also visit
ghidra-reverse FAQ
What does this skill do?
It guides an AI agent through reverse engineering binaries with Ghidra, including decompiling functions and exporting the key results.
When should I use Ghidra instead of IDA?
The skill suggests it when you have no IDA license, prefer an open tool, or need batch headless analysis or CI decompilation.
Can it run without the GUI?
Yes. The skill covers Ghidra's headless mode for batch analysis as well as its graphical interface.
Which scripting languages are supported?
Ghidra scripts in Java and Python, using Jython or PyGhidra for Python.
How do I install it?
Run npx skills add https://github.com/zhaoxuya520/reverse-skill --skill ghidra-reverse.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Warn and Snyk Pass. A Warn or Fail is worth reading before you install.
What are the best ghidra-reverse alternatives?
Popular alternatives to ghidra-reverse include binary-analysis-patterns, reverse-engineer-anything and spec-miner. See all ghidra-reverse alternatives