data-flow-tracer

Trace data movement through decompiled binaries to map parameter flows and global state.

17|3|Updated Feb 22, 2026

Search Tags:#data-flow #binary-analysis #global-state #decompiled-code #taint-tracing #string-trace

Ready to run

npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill data-flow-tracer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: data-flow-tracer
Source: https://github.com/marcosd4h/DeepExtractRuntime/tree/main/skills/data-flow-tracer
Command: npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill data-flow-tracer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Trace data movement through decompiled binaries to reveal parameter flows, API argument origins, and global state interactions.

Core Features & Use Cases

Forward trace: follow how a function parameter propagates into callees and through the code.
Backward trace: identify the origins of an API's arguments, including parameters, globals, and constants.
Global state mapping: build producer/consumer maps for global variables across a module.
String tracing: track how string literals propagate and who references them across functions and modules.

Quick Start

Identify the module DB with the decompiled-code-extractor and run a forward_trace or backward_trace to start mapping data movement.

Frequently Asked Questions about data-flow-tracer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I trace data flow in decompiled binaries to find where API arguments originate?▼

Tracing data flow in decompiled binaries involves applying forward or backward traces to map parameter propagation and API argument origins. This reveals how inputs move through callees, constants, and global state interactions.

What is the best way to map global state producers and consumers across a binary module?▼

Mapping global state producers and consumers is done by using global state mapping techniques to build producer and consumer maps for global variables across a module. This tracks how variables interact throughout the code.

Can I track how string literals propagate across functions in decompiled code?▼

Yes, you can track string lineage by applying string tracing methods to decompiled code. This follows how string literals propagate and identifies who references them across functions and modules.

Do I need a decompiled-code-extractor module DB before starting a forward trace?▼

Yes, you need to identify the module DB with the decompiled-code-extractor before running a forward trace. This database provides the decompiled code and assembly context required to track data movement accurately.

When should I use forward trace versus backward trace for binary analysis?▼

Use forward trace to follow how a function parameter propagates into callees, and use backward trace to identify the origins of an API's arguments. Both leverage tracking databases to reveal data movement.