Security
88
break
通过 Bash 调用 BREAK 搜索脚本，查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例，并基于关联知识回答安全问题。
Security
binary-analysis
Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.
★ 88
GitHub Stars
96
Quality score
102
Files
About this Skill
Analyze unknown binary files through a deterministic CLI that wraps Ghidra's static-analysis engine. Use when you need to inspect a PE, ELF, or Mach-O file — triage suspicious binaries, map imported APIs, decompile functions, trace call paths, or produce structured evidence reports. Do not use for runtime analysis (debugging, dynamic tracing, sandbox execution), for modifying or patching binaries, or for binaries you already know everything about. The skill owns planning, hypothesis formation, and evidence synthesis; the CLI owns all deterministic operations.
Use cases
- Triage suspicious binaries
- Map imported and suspicious APIs
- Decompile and inspect functions
- Trace callers, callees, and call paths
- Generate structured evidence reports
Features
- Deterministic JSON CLI operations
- Structural analysis of PE, ELF, Mach-O, and firmware files
- Function decompilation, disassembly, cross-references, and call graphs
- Suspicious-API and capability analysis
- Markdown evidence report generation
Requirements
- Python 3.12+
- Java JDK 21+
- Ghidra 12.1+
- PyGhidra 3.1+
Supported Agents
Skill files
Other
.coveragerc
Other
evals/evals.json
JSON
Other
README.md
Markdown
Other
tests/contract/__init__.py
Python
Other
tests/contract/test_json_contracts.py
Python
Other
tests/golden/__init__.py
Python
Other
tests/__init__.py
Python
Other
tests/integration/__init__.py
Python
Other
tests/integration/test_cross_area.py
Python
Other
tests/security/__init__.py
Python
Other
tests/unit/__init__.py
Python
Other
tests/unit/test_atomic.py
Python
Other
tests/unit/test_binary_ops.py
Python
Other
tests/unit/test_bootstrap.py
Python
Other
tests/unit/test_cache.py
Python
Other
tests/unit/test_cli.py
Python
Other
tests/unit/test_doctor.py
Python
Other
tests/unit/test_entities.py
Python
Other
tests/unit/test_enums.py
Python
Other
tests/unit/test_envelope.py
Python
Other
tests/unit/test_errors.py
Python
Other
tests/unit/test_fake_adapter.py
Python
Other
tests/unit/test_functions.py
Python
Other
tests/unit/test_ghidra_adapter.py
Python
Other
tests/unit/test_lock.py
Python
Other
tests/unit/test_manifest.py
Python
Other
tests/unit/test_project_lifecycle.py
Python
Other
tests/unit/test_references.py
Python
Other
tests/unit/test_regressions.py
Python
Other
tests/unit/test_reporting.py
Python
Other
tests/unit/test_safety_hardening.py
Python
Other
tests/unit/test_schemas.py
Python
Other
tests/unit/test_search.py
Python
Other
tests/unit/test_security.py
Python
Other
tests/unit/test_selectors.py
Python
Other
tests/unit/test_structural.py
Python
Other
tests/unit/test_version.py
Python
Other
tests/unit/test_worker.py
Python
Other
tests/unit/test_workspace.py
Python
Reference
references/binary-formats.md
Markdown
Reference
references/cli-reference.md
Markdown
Reference
references/evidence-and-confidence.md
Markdown
Reference
references/firmware.md
Markdown
Reference
references/function-analysis.md
Markdown
Reference
references/installation.md
Markdown
Reference
references/packed-and-obfuscated.md
Markdown
Reference
references/reporting.md
Markdown
Reference
references/security.md
Markdown
Reference
references/triage-workflow.md
Markdown
Reference
references/troubleshooting.md
Markdown
Script
scripts/binary
Script
scripts/binary_analysis/adapters/base.py
Python
Script
scripts/binary_analysis/adapters/fake.py
Python
Script
scripts/binary_analysis/adapters/ghidra/adapter.py
Python
Script
scripts/binary_analysis/adapters/ghidra/bridge.py
Python
Script
scripts/binary_analysis/adapters/ghidra/__init__.py
Python
Script
scripts/binary_analysis/adapters/__init__.py
Python
Script
scripts/binary_analysis/bootstrap/deps.py
Python
Script
scripts/binary_analysis/bootstrap/__init__.py
Python
Script
scripts/binary_analysis/cli/binary_ops.py
Python
Script
scripts/binary_analysis/cli/bootstrap.py
Python
Script
scripts/binary_analysis/cli/doctor.py
Python
Script
scripts/binary_analysis/cli/functions.py
Python
Script
scripts/binary_analysis/cli/helpers.py
Python
Script
scripts/binary_analysis/cli/__init__.py
Python
Script
scripts/binary_analysis/cli/main.py
Python
Script
scripts/binary_analysis/cli/project.py
Python
Script
scripts/binary_analysis/cli/references.py
Python
Script
scripts/binary_analysis/cli/reporting.py
Python
Script
scripts/binary_analysis/cli/search.py
Python
Script
scripts/binary_analysis/cli/security.py
Python
Script
scripts/binary_analysis/cli/structural.py
Python
Script
scripts/binary_analysis/cli/version.py
Python
Script
scripts/binary_analysis/cli/worker.py
Python
Script
scripts/binary_analysis/domain/entities.py
Python
Script
scripts/binary_analysis/domain/enums.py
Python
Script
scripts/binary_analysis/domain/errors.py
Python
Script
scripts/binary_analysis/domain/__init__.py
Python
Script
scripts/binary_analysis/domain/schemas.py
Python
Script
scripts/binary_analysis/domain/selectors.py
Python
Script
scripts/binary_analysis/__init__.py
Python
Script
scripts/binary_analysis/projects/atomic.py
Python
Script
scripts/binary_analysis/projects/cache.py
Python
Script
scripts/binary_analysis/projects/diagnostics.py
Python
Script
scripts/binary_analysis/projects/__init__.py
Python
Script
scripts/binary_analysis/projects/lock.py
Python
Script
scripts/binary_analysis/projects/manifest.py
Python
Script
scripts/binary_analysis/projects/path_security.py
Python
Script
scripts/binary_analysis/projects/state_machine.py
Python
Script
scripts/binary_analysis/projects/workspace.py
Python
Script
scripts/binary_analysis/reporting/audit.py
Python
Script
scripts/binary_analysis/reporting/generator.py
Python
Script
scripts/binary_analysis/reporting/__init__.py
Python
Script
scripts/binary_analysis/rules/capabilities.py
Python
Script
scripts/binary_analysis/rules/engine.py
Python
Script
scripts/binary_analysis/rules/__init__.py
Python
Script
scripts/binary_analysis/rules/suspicious_apis.py
Python
Script
scripts/binary_analysis/worker/client.py
Python
Script
scripts/binary_analysis/worker/__init__.py
Python
Script
scripts/binary_analysis/worker/resolver.py
Python
Script
scripts/binary_analysis/worker/server.py
Python
SKILL.md
SKILL.md
Markdown
Related Skills
Security
82
wpegpt-analyzer
Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…
Security
95
privacy-engineering
Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and pr…
Security
94
secure-software-engineering
Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidenc…
Security
94
pace-plan
Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…
Security
92
crowdsec
Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…
Security
90
security-audit-methodology
Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing…
Security
88
account-deletion-check
Audits iOS and macOS projects for compliant in-app account deletion, including deletion UI, backend removal, deactivation-only flows, and Sign in with Apple credential revocation.