binary-analysis SKILL.md skillA
binary-analysis from magnus919/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add magnus919/agent-skills/binary-analysis@git:20261006.824e04aPins git:20261006.824e04a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- magnus919/agent-skills
- Path
binary-analysis/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261006.824e04a, committed Oct 6, 2026
- First version recorded
- Jul 31, 2026
- Size
- 16,053 bytes
- Repository stars
- 166
- License
- MIT
Plan static inspection of unknown binary files with a deterministic CLI whose Ghidra operations are currently unimplemented and fail closed. Use when you need to inspect a PE, ELF, or Mach-O file — triage suspicious binaries, map imported APIs, decompile functions, trace call paths, or produce structured evidence reports. Do not use for runtime analysis (debugging, dynamic tracing, sandbox execution), for modifying or patching binaries, or for binaries you already know everything about. The…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Binary Analysis — Agent Skill Plan analysis of unknown binary files through a deterministic, non-interactive CLI intended for Ghidra; see the implementation limitation below. The skill teaches you how to reason about binaries: when to triage versus deep-dive, how to interpret canonical evidence, and how to produce auditable reports. All observable operations happen through the `binary` CLI — you never call Ghidra APIs directly. ## Implementation status This release does **not** provide live Ghidra analysis. Import, analyze, metadata, structural/function queries, search, triage, and report generation stop with an explicit backend error. Installing dependencies cannot make the unfinished adapter operational. Project administration and dependency diagnostics remain available. The production CLI does not load or select `FakeAdapter`; tests inject it explicitly. There is no fixture/demo CLI switch or environment override. The workflow below describes the intended interface, not runnable analysis in this release. Stop at the backend error and explain the limitation. Do not cite old fixture-derived reports as evidence about a user's binary, even if an old …
Read the whole file at its exact version.
How to install
mdr add magnus919/agent-skills/binary-analysis@sha256:e38b926a737df3dfThe line at the top of this page pins the label git:20261006.824e04a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_6rr3radvnhzbbhil)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jul 31, 2026 and Oct 6, 2026, about one every 67 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261006.824e04a latest | 2026-10-06 | 824e04a | 16,053 B | A | view · diff |
| git:20260731.f66ed48 | 2026-07-31 | f66ed48 | 15,064 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16053 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
magnus919/agent-skills · 166 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_6rr3radvnhzbbhil GET https://markdownregistry.com/api/v1/resolve?ref=magnus919/agent-skills/binary-analysis GET https://markdownregistry.com/api/v1/blob/e38b926a737df3dffca219f133f2c05966e41d2d695fcabb702b11d73cb920ea
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from magnus919/agent-skills
Every file in magnus919/agent-skills