Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/akiselev/ghidra-cli/ghidra-agentgit clone --depth 1 https://github.com/akiselev/ghidra-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/akiselev/ghidra-cli/ghidra-agent)<a href="https://agentmods.dev/agents/akiselev/ghidra-cli/ghidra-agent"><img src="https://agentmods.dev/badge/agents/akiselev/ghidra-cli/ghidra-agent.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.02935 |
| Opus 5 | $0.00000 | $0.01468 |
| Sonnet 5 | $0.00000 | $0.00587 |
| Haiku 4.5 | $0.00000 | $0.00294 |
Grade A, and why
ghidra-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
The source is not reproduced here
Licensed GPL-3.0
The repository is licensed GPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 480 lines · 0 tokens per session scan A 410bacd02bd2
ghidra-agent is an agent published in the GitHub repository akiselev/ghidra-cli (205 stars, last pushed 26d ago), licensed GPL-3.0. It costs nothing until one of its globs matches a file; then it loads 2,935 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
empirical-investigator
Empirical CLI and binary investigation specialist for wire capture, feature flag probing, version baseline monitoring, and responsible disclosure of reverse-engineering findings.
cyber-security-analyst
Detects and analyzes system threats, malware, and security vulnerabilities on Windows systems. Use for system scanning, browser hijacking detection, Windows registry analysis, suspicious file investigation, binary analysis, and threat reporting with remediation steps.
binary-static-inspector
Read-only helper that queries Binary Ninja MCP / BinAssistMCP and static-analysis CLIs (radare2, objdump, strings, otool, class-dump) on behalf of the main agent. Spawn this when a static probe will return >1 KB of disassembly, a function decompile, a symbol cross-reference list, or a full S-box / round-constant table…
hypothesis-reviewer
Independent blue-team reviewer for algokiller Hypothesis Ledger. The main trace-analysis agent MUST spawn this reviewer before any hypothesisconclude(finalconfidence="high") call on a load-bearing hypothesis (one that will be cited by the final writeartifact). The reviewer examines the cited hypothesis in isolation …
ledger-curator
Read-only ledger consistency reviewer. Spawn this near the end of a long ciphertext-recovery / trace-analysis session, BEFORE the main agent calls writeartifact on the final recovered.py / report.md. The curator scans the hypothesis ledger and produces a one-page audit of (a) which concluded hypotheses are cited by…
trace-hexdump-extractor
Read-only helper for the main trace-analysis / ciphertext-recovery agent. Spawn this when a tracehexblock will return >2 KB of byteshex (typical for NSJSONSerialization dataWithJSONObject: blocks, large memcpy / sprintf outputs, AES key-buffer dumps). The subagent extracts the hexdump in its own context, parses byte…