Agent skill
static
Binary reverse engineering - PE/ELF analysis, Ghidra, capability detection
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/static
SKILL.md
Static Malware Analysis
Analyze binaries without execution:
- File triage (type, packer, entropy)
- String analysis (FLOSS)
- PE/ELF structure analysis
- Import/export analysis
- Ghidra reverse engineering
- Capability detection (capa)
- IOC extraction
Required Context
- Sample: File path
- Depth: Quick triage or full analysis
- Focus: Persistence, C2, credentials, etc.
- Output: Report, IOCs, YARA rule
Tools Used
Ghidra, radare2, strings, floss, capa, binwalk, objdump, readelf
Example
/static
Sample: /samples/malware.exe
Depth: Full analysis
Output: IOCs + YARA rule
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?