CLAUDE.mdA

CLAUDE.md from 2389-research/binary-re is a CLAUDE.md file: the standing instructions Claude Code reads in that repo.

Install it, pinned
mdr add 2389-research/binary-re/CLAUDE.md@git:20260706.1bbfa9b

Pins git:20260706.1bbfa9b in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
CLAUDE.md file
Repository
2389-research/binary-re
Path
CLAUDE.md
Versions recorded
5
Latest version
git:20260706.1bbfa9b, committed Jul 6, 2026
First version recorded
Jan 6, 2026
Size
9,558 bytes
Repository stars
22
License
MIT

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Binary Reverse Engineering Plugin

## Overview

Agentic binary reverse engineering for ELF binaries from embedded devices. The LLM drives analysis while humans provide context about the target platform, hardware, and suspected purpose.

## CRITICAL: Skill Invocation Required

**You MUST invoke the `binary-re` skill BEFORE taking any action** when:

### The Core Pattern
**User has a binary + wants to understand something about it**

This covers ANY question about a binary's behavior, purpose, or internals:
- "I have a binary that does X..."
- "What does this binary do?"
- "How does this work?"
- "Can you analyze/figure out/understand this?"
- "This executable [anything]..."

### Why This Matters
The skill provides:
1. **Structured methodology** - Hypothesis-driven analysis prevents wasted effort
2. **Tool selection** - Correct r2/Ghidra/QEMU invocation for the architecture
3. **Human-in-the-loop gates** - Safety checks before execution
4. **Episodic memory integration** - Findings persist across sessions

### What NOT To Do
❌ Run `file`, `strings`, `rabin2`, or `r2` commands before invoking the skill
❌ Start analyzing without checking episodic memory for prior work
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add 2389-research/binary-re/CLAUDE.md@sha256:7b49381b39688203

The line at the top of this page pins the label git:20260706.1bbfa9b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_pjiiq724mcsdgpy6.svg)](https://markdownregistry.com/a/art_pjiiq724mcsdgpy6)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Jan 6, 2026 and Jul 6, 2026, about one every 45 days.

versioncommittedcommitsizeaudit
git:20260706.1bbfa9b latest2026-07-06 1bbfa9b 9,558 BA view · diff
git:20260106.49edd782026-01-06 49edd78 9,558 BA view · diff
git:20260106.b5664d92026-01-06 b5664d9 9,558 BA view · diff
git:20260106.3ea64f12026-01-06 3ea64f1 8,106 BA view · diff
git:20260106.b6bcfb32026-01-06 b6bcfb3 7,709 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (9558 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

2389-research/binary-re · 22 stars · license MIT · pushed 2026-09-25 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_pjiiq724mcsdgpy6
GET https://markdownregistry.com/api/v1/resolve?ref=2389-research/binary-re/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/7b49381b3968820321d3739bbd2400c659c9520498195cf7434afb2fe08b243d

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: what a CLAUDE.md file is · keeping AGENTS.md and CLAUDE.md in sync · which agent file does what.

More from 2389-research/binary-re

binary-re SKILL.md skill
2389-research/binary-re · skills/binary-re/SKILL.md · Analyzes ELF binaries, executables, and firmware images to understand behavior without source code; coordinates…
git:20260925.4c7cd80 · audit A · 22 stars
binary-re:dynamic-analysis SKILL.md skill
2389-research/binary-re · skills/dynamic-analysis/SKILL.md · Observes runtime behavior of binaries via QEMU emulation, GDB debugging, and Frida hooking — syscall tracing…
git:20260706.1bbfa9b · audit A · 22 stars
binary-re:static-analysis SKILL.md skill
2389-research/binary-re · skills/static-analysis/SKILL.md · Performs static analysis of binary code using radare2 and Ghidra — function enumeration, cross-reference tracing…
git:20260706.1bbfa9b · audit A · 22 stars
binary-re:synthesis SKILL.md skill
2389-research/binary-re · skills/synthesis/SKILL.md · Compiles binary analysis findings into structured reports — correlates facts from triage, static, and dynamic phases…
git:20260706.1bbfa9b · audit A · 22 stars
binary-re:tool-setup SKILL.md skill
2389-research/binary-re · skills/tool-setup/SKILL.md · Installs and configures reverse engineering tools including radare2, Ghidra, GDB, QEMU, Frida, and cross-compilation…
git:20260706.1bbfa9b · audit A · 22 stars
binary-re:triage SKILL.md skill
2389-research/binary-re · skills/triage/SKILL.md · Fingerprints unknown binaries using rabin2 — detects architecture (ARM, x86, MIPS), ABI, libc, dependencies, and…
git:20260706.1bbfa9b · audit A · 22 stars

Every file in 2389-research/binary-re

Other files named CLAUDE.md

CLAUDE.md CLAUDE.md file
affaan-m/ecc · CLAUDE.md
git:20261020.9471ef4 · audit A · 299,696 stars
CLAUDE.md CLAUDE.md file
firecrawl/firecrawl · CLAUDE.md
git:20261008.5a75dca · audit A · 199,595 stars
CLAUDE.md CLAUDE.md file
garrytan/gstack · CLAUDE.md
git:20261107.ef99eb5 · audit A · 140,694 stars
CLAUDE.md CLAUDE.md file
juliusbrussee/caveman · CLAUDE.md
git:20261106.af560e1 · audit B · 118,366 stars
CLAUDE.md CLAUDE.md file
addyosmani/agent-skills · CLAUDE.md
git:20260720.8fd2081 · audit A · 113,383 stars
CLAUDE.md CLAUDE.md file
nexu-io/open-design · CLAUDE.md
git:20260430.9b57c22 · audit B · 106,541 stars
CLAUDE.md CLAUDE.md file
pbakaus/impeccable · CLAUDE.md
git:20261105.71dfd50 · audit A · 106,186 stars
CLAUDE.md CLAUDE.md file
debpalash/voicestudio · CLAUDE.md
git:20261104.c2998f6 · audit A · 102,675 stars

Browse by kind, by grade A, or by owner.