mrphrazermrphrazerCommunityยท1 Agent Skills Included

agentic-malware-analysis

Automated malware triage and reverse engineering in Docker

Automates deep malware reverse engineering for PE, ELF, and Mach-O binaries inside a Kali Linux Docker container. Extracts strings, imports, hashes, YARA and capa results, then ranks suspicious signals and builds evidence-backed behavior hypotheses. Connects to Binary Ninja or Ghidra via MCP for disassembly and cross-references, producing a complete case directory with reports and IOCs.
npx skills add mrphrazer/agentic-malware-analysis --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install agentic-malware-analysis?โ–ผ

Run `npx skills add mrphrazer/agentic-malware-analysis --all -g -y` in your terminal to install the skill globally.

How to automate malware analysis with AI?โ–ผ

This skill runs a structured multi-phase workflow that fingerprints a binary, extracts strings and imports, ranks suspicious signals, and generates evidence-backed behavior hypotheses automatically.

Which binary formats does it support?โ–ผ

It analyzes PE files for Windows, ELF files for Linux, and Mach-O files for macOS, with format-specific tooling and signal rules for each.

Does it work with Binary Ninja and Ghidra?โ–ผ

Yes. It connects to Binary Ninja or Ghidra through MCP servers for disassembly, decompilation, and cross-references, falling back to radare2 if neither is available.

Does it work with Claude Code and Codex CLI?โ–ผ

Yes. The orchestrator skill ships in dedicated versions for both Claude Code and Codex CLI and runs inside the provided Docker environment.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’