ghidra-rpc

Automate Ghidra reverse engineering to decompile and analyze binary files.

307|24|Updated Jun 4, 2026
One-click install
npx skills add https://github.com/cellebrite-labs/ghidra-rpc --skill ghidra-rpc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ghidra-rpc
Source: https://github.com/cellebrite-labs/ghidra-rpc/tree/main
Command: npx skills add https://github.com/cellebrite-labs/ghidra-rpc --skill ghidra-rpc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyghidra, click, jpype1, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates reverse engineering tasks using Ghidra, enabling users to perform complex operations like decompilation, binary analysis, and vulnerability research without manual intervention.

Core Features & Use Cases

  • Automated Decomposition: Decompile functions, trace call graphs, and analyze binary versions automatically.
  • Binary Analysis: Perform detailed analysis on binary files, including metadata extraction and disassembly.
  • Vulnerability Research: Use the Skill to identify and research vulnerabilities in compiled code.
  • Use Case: If you have a binary file and need to understand its structure, the ghidra-rpc skill can automatically load the file into Ghidra, decompile the functions, and provide detailed information about the binary's components.

Quick Start

Load the binary file '/usr/bin/target' into Ghidra and find any unsafe string operations by running:

uv run ghidra-rpc load /usr/bin/target -p /tmp/re.gpr
uv run ghidra-rpc strings /usr/bin/target "unsafe"

Frequently Asked Questions about ghidra-rpc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate binary analysis and decompilation using Ghidra?

Automating binary analysis and decompilation with Ghidra involves using the ghidra-rpc skill to programmatically load compiled files, trace call graphs, and extract metadata without manual GUI intervention.

Can I use PyGhidra and JPype1 to script vulnerability research on compiled code?

Yes, you can script vulnerability research on compiled code using ghidra-rpc, which leverages PyGhidra and JPype1 to provide API access for automated analysis and identifying unsafe operations in binaries.

What is the best way to extract unsafe strings from a binary file for reverse engineering?

The best way to extract unsafe strings for reverse engineering is using the ghidra-rpc command line interface, loading the target binary and executing a string search operation to identify specific patterns.

Do I need Click and JPype1 installed to run automated Ghidra decompilation tasks?

Yes, you need Click and JPype1 installed alongside PyGhidra, as these dependencies are required for the ghidra-rpc skill to execute API access and command-line operations for automated decompilation.

Does automated reverse engineering with Ghidra support extracting function call graphs?

Automated reverse engineering with Ghidra supports extracting function call graphs, allowing users to trace execution paths and analyze the structural components of compiled binary files automatically.

How do I load a binary into Ghidra via command line for automated disassembly?

To load a binary into Ghidra for automated disassembly, run the ghidra-rpc load command with the target file path and specify a project file location to initiate the analysis process.