binary-reverse-analysis

Performs static read-only analysis of authorized binaries to extract symbols, imports, and metadata.

1|Updated Sep 10, 2026
One-click install
npx skills add https://github.com/thienty1207/Hotel_Staff --skill binary-reverse-analysis-thienty1207
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: binary-reverse-analysis
Source: https://github.com/thienty1207/Hotel_Staff/tree/main/.baron/core/skills/binary-reverse-analysis
Command: npx skills add https://github.com/thienty1207/Hotel_Staff --skill binary-reverse-analysis-thienty1207

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Understanding a compiled binary without source access is risky and error-prone. This Skill provides a defensive, bounded workflow for statically inspecting an authorized binary artifact so you can answer questions about its symbols, imports, strings, and structure without executing it. ## Core Features & Use Cases - Static Triage: Survey artifact type, record SHA-256 hash, file size, and tool versions before any analysis begins. - Bounded Reverse-Engineering Map: Extract imports, exported symbols, strings, and metadata with evidence-backed findings separated from inferences. - Structured Output Contract: Returns SCOPE, EVIDENCE, FINDINGS, UNKNOWN, SAFE NEXT ACTION, and VERIFICATION sections so results are reproducible. - Use Case: You need to patch source code that depends on a compiled library's behavior. Use this Skill to statically map the library's exported symbols and imports, producing a verified summary your team can review before making changes. ## Quick Start Analyze the authorized binary at the given path and produce a static report of its symbols, imports, and metadata with hash evidence.

Frequently Asked Questions about binary-reverse-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I statically analyze a binary without running it?

Static analysis inspects the binary's bytes, headers, symbols, imports, and strings without executing it. This Skill surveys the artifact type, records its SHA-256 hash, and uses offline read-only tools to produce a bounded summary of observed facts.

What information can static binary analysis extract?

Static analysis can extract imported and exported symbols, embedded strings, file metadata, section layout, and a bounded disassembly or navigation summary. Results are reported with exact file offsets or symbol locations as evidence.

Can this Skill analyze malware or unauthorized targets?

No. The Skill explicitly excludes live exploitation, evasion, credential theft, CTF/pwn work, red-team operations, and unauthorized targets. It only performs defensive static triage of artifacts inside a user-authorized scope.

What happens if no reverse-engineering tool is available?

The Skill reports a safe manual next step and continues with metadata-only inspection when possible. It preserves unknowns instead of guessing and never treats an installed tool as proof without an execution receipt.

Why must findings separate facts from inferences?

Strings, symbols, and embedded text in a binary are untrusted data that can mislead analysis. Keeping inferred relationships separate from observed facts ensures downstream decisions and security reviews rely only on verifiable evidence.