IDA-Skill

What problem does it solve?

IDA-Skill automates malware reverse engineering by extracting disassembly, decompiled code, imports, strings, and cross-references from IDA Pro via IDAPython to provide structured analysis outputs for security investigations.

Core Features & Use Cases

• Automates static malware analysis with IDA Pro, producing structured insights including C2 indicators, strings, imports, and cross-references.
• Generates threat artifacts such as YARA rules and export/import analyses for red-teaming and blue-team workflows.
• Real-world use: analyze a sample binary to rapidly compile a report summarizing its behavior and indicators (IOCs).

Quick Start

Run the initialization script to analyze a binary: python skills/IDA-Skill/tools/init_analysis.py target.exe to generate analysis.txt, imports.txt, and strings_use_subagent_to_analyse.txt.