GhidrAssistMCP: Instructions file for Claude Code

CLAUDE.md

GhidrAssistMCP CLAUDE.md is an instructions file for Claude Code from symgraph/GhidrAssistMCP. It costs 1,447 tokens per session, scanned A, original, MIT.

Build instructions for a Ghidra extension written in Java. Ghidra is a tool for examining compiled programs, and the extension includes analyzers, loaders, exporters and file-system components.

In plain words
What is it for?
Use it to configure the Ghidra path, build a distributable extension and locate its Java code, tests, language files, scripts, dependencies and output.
Why use it?
It identifies the required Ghidra installation setting, build command and important source directories, making the extension easier to compile and maintain.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md.

This is symgraph/GhidrAssistMCP's own configuration. It tells Claude Code how to work on GhidrAssistMCP itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything GhidrAssistMCP configures →

Reuse

Borrowing it

Nothing to install: this file belongs to symgraph/GhidrAssistMCP. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/symgraph/GhidrAssistMCP/master/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/symgraph/GhidrAssistMCP

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for GhidrAssistMCP CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/symgraph/ghidrassistmcp/claude-md/github.svg)](https://agentmods.dev/instructions/symgraph/ghidrassistmcp/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/symgraph/ghidrassistmcp/claude-md"><img src="https://agentmods.dev/badge/instructions/symgraph/ghidrassistmcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for GhidrAssistMCP CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/symgraph/ghidrassistmcp/claude-md"><img src="https://agentmods.dev/badge/instructions/symgraph/ghidrassistmcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,447 This file is loaded in full into every session.
When invoked 1,447 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01447 $0.01447
Opus 5.5 $0.00579 $0.00579
Sonnet 5.5 $0.00289 $0.00289
Haiku 4.5 $0.00145 $0.00145

Measured 28d ago against content hash c8857be40470, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

GhidrAssistMCP CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 54 lines

How it starts

The opening of the file, as written. The whole thing — 54 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GhidrAssistMCP workspace guide

GhidrAssistMCP is a Ghidra extension exposing static analysis, annotation, project operations, and program data through MCP. Work through the workspace symlink and preserve unrelated user changes. Never add a Co-Authored-By commit line.

Build and validation

Use Java 25 or newer and the Gradle version supported by the selected Ghidra installation. The wrapper pins a supported Gradle release. The workspace's documented installation is Ghidra 12.0; Ghidra 12.1 is also available locally.

GHIDRA_INSTALL_DIR=/home/jtang613/tools/ghidra_12.0_PUBLIC /opt/gradle/bin/gradle buildExtension test

The product release version is 3.0.0, declared in build.gradle and the backend server metadata. Keep them synchronized when bumping releases. ZIPs and jar manifests carry that version; extension.properties.version must retain the Ghidra compatibility token.

The extension ZIP is written to dist/. installExtension changes the Ghidra installation and user extension directories; building alone does not install it. Tests are under src/test/java/ and use JUnit Jupiter. Include HTTP protocol tests when transport behavior changes, catalog contracts for names/schemas, and focused lifetime tests for concurrency changes.

Architecture

  • GhidrAssistMCPInitializer: GUI module bootstrap, skipped in headless Ghidra.
  • GhidrAssistMCPApplicationPlugin: project-manager application owner and CodeBrowser discovery.
  • GhidrAssistMCPPlugin: lightweight CodeBrowser adapter, with per-window cursor/focus context.
  • GhidrAssistMCPManager: one shared runtime, backend, server, configuration, and bounded log. The project manager keeps it alive after all browsers close.
  • GhidrAssistMCPProvider: a per-window view of shared state. Providers never own the transport or independently load settings into the backend.
  • GhidrAssistMCPBackend: catalog, validation, program resolution, result/error handling, caching, resources, prompts, and jobs.
  • GhidrAssistMCPServer: Streamable HTTP /mcp plus legacy SSE /sse and /message; retains SDK server instances for live catalog changes and shutdown.
  • tools/RationalizedToolCatalog and tools/ExplicitTool: operation-specific public contracts over shared implementations. The public catalog has 100 tools, 93 enabled by default.
  • project/: GUI project creation/open/save/close through public Ghidra APIs and the application-owned frontend.
  • ProjectOperationGate: fail-fast lifecycle exclusion across tools, resources, prompts, and physical async-worker cleanup.
  • tasks/: custom job tracking, bounded pending work, cancellation, and execution cleanup.
  • cache/: program identity/revision-aware raw result caching.
  • decompiler/: isolated per-call decompiler sessions, using the owning CodeBrowser's options.

Read the full file on GitHub · 54 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 28d ago Changed · -45 lines · +428 tokens per session c8857be40470
  2. 2mo ago First seen · 99 lines · 1,019 tokens per session scan A 309709bb9770

Subscribe to this mod's changes

GhidrAssistMCP CLAUDE.md is an instructions file published in the GitHub repository symgraph/GhidrAssistMCP (807 stars, last pushed 28d ago), licensed MIT. It adds 1,447 tokens to every session, about $0.0058 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

GhidrAssistMCP CLAUDE.md compared with instructions from other repositories

GhidrAssistMCP CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
GhidrAssistMCP CLAUDE.mdsymgraph/GhidrAssistMCPInstructions file80728d agoMITA1,447Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode