← All skills
binary-analysis
70 / 100 · Review before installing
Check before installing.
By magnus919/agent-skills (GitHub) · productivity · 172 stars · scanned at commit da4ce5c
Plan static inspection of unknown binary files with a deterministic CLI whose Ghidra operations are currently unimplemented and fail closed. Use when you need to inspect a PE, ELF, or Mach-O file — triage suspicious binaries, map imported APIs, decompile functions, trace call paths, or produce structured evidence reports. Do not use for runtime analysis (debugging, dynamic tracing, sandbox execution), for modifying or patching binaries, or for binaries you already know everything about. The ski…
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 16 places.
Show 13 more
- binary-analysis/references/installation.md, line 37
| Java JDK 21+ | `apt install openjdk-21-jdk` (Debian/Ubuntu) or `dnf install java-21-openjdk-devel` (Fedora) | - binary-analysis/references/installation.md, line 39
| PyGhidra 3.1+ | `pip install pyghidra` inside a venv | - binary-analysis/references/installation.md, line 47
| PyGhidra 3.1+ | `pip install pyghidra` | - binary-analysis/references/installation.md, line 115
pip install pyghidra - binary-analysis/references/installation.md, line 185
| `pyghidra: import failed` | PyGhidra not installed or wrong Python | `pip install pyghidra` in the active venv | - binary-analysis/references/installation.md, line 186
| `pyghidra: version too old` | PyGhidra < 3.1 | `pip install --upgrade pyghidra` | - binary-analysis/references/installation.md, line 273
pip install pyghidra - binary-analysis/references/troubleshooting.md, line 79
pip install pyghidra - binary-analysis/scripts/binary_analysis/bootstrap/deps.py, line 146
"On macOS: brew install openjdk@21. " - binary-analysis/scripts/binary_analysis/bootstrap/deps.py, line 147
"On Linux: apt install openjdk-21-jdk or yum install java-21-openjdk-devel. " - binary-analysis/scripts/binary_analysis/cli/bootstrap.py, line 251
"remediation": "Install pip first, then run: pip install pyghidra", - binary-analysis/scripts/binary_analysis/cli/bootstrap.py, line 267
"message": f"pip install pyghidra failed: {result.stderr.strip()[:500]}", - binary-analysis/scripts/binary_analysis/cli/bootstrap.py, line 277
"message": f"pip install pyghidra error: {e}",
Runs commands on your computer
The author does not mention this.
Found in 24 places.
Show 17 more
- binary-analysis/SKILL.md, line 125
binary project create <project-name> --json - binary-analysis/SKILL.md, line 139
binary analyze --project <project-name> --json - binary-analysis/SKILL.md, line 159
binary triage --project <project-name> --json - binary-analysis/SKILL.md, line 166
binary metadata --project <project-name> --json - binary-analysis/SKILL.md, line 176
binary functions --project <project-name> --json - binary-analysis/SKILL.md, line 187
binary trace --project <project-name> --from <source> --to <target> --json - binary-analysis/SKILL.md, line 195
binary export-report --project <project-name> --type triage --format markdown --json - binary-analysis/scripts/binary_analysis/bootstrap/deps.py, line 311
result = subprocess.run( - binary-analysis/scripts/binary_analysis/bootstrap/deps.py, line 325
except (FileNotFoundError, subprocess.TimeoutExpired, PermissionError): - binary-analysis/scripts/binary_analysis/cli/bootstrap.py, line 255
result = subprocess.run( - binary-analysis/scripts/binary_analysis/cli/bootstrap.py, line 271
except (subprocess.TimeoutExpired, FileNotFoundError) as e: - binary-analysis/scripts/test_runtime_backend.py, line 27
check = subprocess.run( - binary-analysis/scripts/test_runtime_backend.py, line 93
with mock.patch('subprocess.Popen', side_effect=run_child_start) as popen: - binary-analysis/scripts/test_runtime_backend.py, line 186
result = subprocess.run( - binary-analysis/tests/unit/test_safety_hardening.py, line 151
"""The target binary path is never passed to subprocess.run.""" - binary-analysis/tests/unit/test_safety_hardening.py, line 288
"""Code review confirms zero uses of os.system().""" - binary-analysis/tests/unit/test_safety_hardening.py, line 293
"""Code review confirms zero uses of subprocess.*(shell=True) with user input."""
and 4 more places
Changes files outside its own folder
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (productivity) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'binary-analysis' ] || [ -L ~/.agents/skills/'binary-analysis' ]; then echo 'A skill folder named binary-analysis already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/magnus919/agent-skills' "$d" && git -C "$d" checkout --quiet 'da4ce5c6823cce6da80f4e09c84998a4928402c1' -- 'binary-analysis' && mkdir -p ~/.agents/skills && cp -R "$d"/'binary-analysis' ~/.agents/skills/'binary-analysis' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'binary-analysis' ~/.claude/skills/'binary-analysis' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for magnus919/agent-skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/magnus919/agent-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-09 | da4ce5c | 70 |
| 2026-11-07 | 34a4d62 | 85 |