JameZUKJameZUKCommunityยท4 Agent Skills Included

Arkana

Natural-language malware analysis, decompilation, and binary reverse engineering

Analyzes PE, ELF, Mach-O, .NET, Go, and shellcode binaries through plain-English requests. Decompiles functions, unpacks packed malware, extracts C2 configs, maps MITRE ATT&CK techniques, and emulates execution with breakpoints. Eliminates juggling Ghidra, IDA, CyberChef, and YARA by putting 308 analysis tools behind one prompt-driven interface. Includes a real-time web dashboard and an interactive tutor for learning reverse engineering.
npx skills add JameZUK/Arkana --all -g -y
Available:

Explains the server architecture, tool modules, and skill structure so the agent can correctly route binary analysis requests to Arkana's 308 analysis tools.

All Skills in This Repository (4)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install Arkana?โ–ผ

Run `npx skills add JameZUK/Arkana --all -g -y` in your terminal to install all skills in this suite globally.

How to analyze malware with plain English?โ–ผ

Open a binary and describe what you want to know, such as 'triage this sample' or 'extract the C2 config'. Arkana automatically runs the right decompilation, signature, and emulation tools and explains the results.

What file formats does Arkana support?โ–ผ

It handles PE, ELF, Mach-O, .NET, Go, Rust, VB6, AutoIt, and raw shellcode with automatic format detection and integrity checks.

Can Arkana unpack packed malware?โ–ผ

Yes. It detects packing automatically and cascades through automated unpackers, Qiling emulation dumps, and manual OEP analysis to recover the original payload.

Does Arkana work with Claude Code and other MCP clients?โ–ผ

Yes. Arkana is a standard MCP server, so it works with Claude Code and any MCP-compatible client, plus it includes a real-time web dashboard on port 8082.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’