AI-driven agent runtime for Windows PE binary analysis. Turns IDA Pro decompiled code and SQLite databases produced by DeepExtractIDA into structured intelligence through specialized agents, analysis skills, and slash commands
This repository also configures its own agents. See what DeepExtractRuntime tells them →
Command Claude Code needs its repo
AI-driven taint analysis: trace attacker-controlled data from entry points to dangerous sinks across module boundaries. Uses LLM agents that navigate taint-enriched callgraphs with trust boundary metadata, read decompiled code on demand, and verify findings against assembly ground truth.
Command Claude Code needs its repo
Perform a complete triage of a DeepExtractIDA module -- identifying the binary, classifying all functions, mapping the attack surface, and producing a prioritized list of functions worth deeper analysis.
Command Claude Code needs its repo
Analyze WinRT server interfaces in Windows binaries using ground-truth extraction data. Enumerates server classes, maps the privilege-boundary attack surface, audits security properties, classifies entry points, and identifies privilege escalation targets.
Command Claude Code needs its repo
Quick cross-reference lookup for a function: show who calls it (inbound xrefs) and what it calls (outbound xrefs) in a compact table format. Lightweight alternative to /audit for when you just need to see a function's immediate neighborhood.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: