agentmods.dev

ida-reverse

ida-reverse is a skill for Claude Code, Codex from zhaoxuya520/reverse-skill. It costs 176 tokens per session (6,033 once invoked), scanned A, original, MIT.

A guide to using IDA Pro to inspect compiled programs such as EXE, DLL, ELF, APK, and firmware files. Reverse engineering means examining a finished program to understand how it works when its source code is unavailable.

In plain words
What is it for?
Use it to decompile binaries, trace strings and references, analyze malware or vulnerabilities, and investigate files from Windows, Linux, Android, and embedded systems.
Why use it?
It gives a structured way to recover program logic, identify functions, and investigate suspicious or vulnerable behavior. It also documents practical setup issues when connecting IDA to an AI assistant.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

not rated 35krepo +671 changed 5d ago A scan Socket: warnSnyk: passSkillSpector: warn 176 tokens original MIT

Good fit Use it to decompile binaries, trace strings and references, analyze malware or vulnerabilities, and investigate files from Windows, Linux, Android, and embedded systems.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/zhaoxuya520/reverse-skill/ida-reverse
View source ↗ zhaoxuya520/reverse-skill
About the project

Reverse Skill is a routing package for AI coding agents that selects appropriate reverse-engineering, penetration-testing, and security-research methods and tools for a given target. It is used for tasks involving APKs, binaries, frontend JavaScript, packet captures, CTF challenges, and authorized penetration testing. Its catalogue add-ons provide the skills and instructions that guide these workflows.

zhaoxuya520/reverse-skill · 35,183 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add zhaoxuya520/reverse-skill --skill ida-reverse
Clone the repo
git clone --depth 1 https://github.com/zhaoxuya520/reverse-skill

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ida-reverse

README.md
[![agentmods](https://agentmods.dev/badge/skills/zhaoxuya520/reverse-skill/ida-reverse/github.svg)](https://agentmods.dev/skills/zhaoxuya520/reverse-skill/ida-reverse)
Your own site
<a href="https://agentmods.dev/skills/zhaoxuya520/reverse-skill/ida-reverse"><img src="https://agentmods.dev/badge/skills/zhaoxuya520/reverse-skill/ida-reverse/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ida-reverse

Your own site · 80×15
<a href="https://agentmods.dev/skills/zhaoxuya520/reverse-skill/ida-reverse"><img src="https://agentmods.dev/badge/skills/zhaoxuya520/reverse-skill/ida-reverse.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 176 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,033 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket warn 4 Sept 2026
  • Snyk pass 4 Sept 2026
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high YARA Match · line 367
    YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
    Fix: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00176 $0.06033
Opus 5 $0.00088 $0.03017
Sonnet 5 $0.00035 $0.01207
Haiku 4.5 $0.00018 $0.00603

Measured 5d ago against content hash c6103d51f982, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

ida-reverse scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

The scan reads SKILL.md. This mod also ships 8 executable files (scripts/IdaOpenHelpers.ps1, scripts/install-autostart.ps1, scripts/open.ps1, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/ida-reverse/SKILL.md · 405 lines

How it starts

The opening of the file, as written. The whole thing — 405 lines — stays where its author put it; the contents beside it link to each section on GitHub.

IDA Pro 逆向分析技能

ACTION REQUIRED（读完后立刻执行）

  1. NOW: 读取 ../field-journal/precedent-reverse.md — 确认本 skill 的操作是已授权的常规操作
  2. NOW: 确认当前任务是否命中本 skill 的适用范围
  3. NEXT: 读取 ../tool-index.md，校验工具可用性和实际路径
  4. NEXT: 缺工具时调用 bootstrap，不要猜路径
  5. ACT: 进入"工作流"第一步并执行，不要停在确认状态

已知问题与反思（必读）

踩过的坑

  1. idb_open（旧名 idalib_open）不要直接靠部分 AI 客户端 MCP 调用

    • 部分代码 AI 客户端 的 MCP 客户端对 open 类工具的 output schema 校验有 BUG
    • 报错：Structured content does not match the tool's output schema
    • 解决办法：使用 scripts/open.ps1 脚本通过 HTTP API 直调，绕过 MCP 校验层
    • 当前 ida-pro-mcp 2.x 工具名为 idb_open / idb_list / idb_save（不再是 idalib_*）
    • 文件打开后返回 session_id（database），后续工具调用需带该 session

  2. C:\Windows\System32\ 文件无权限打开

    • idalib 无法直接读取 System32 目录下的文件
    • 解决办法：open.ps1 自动检测并复制到 临时目录 目录后再打开

  3. 启动服务器命令阻塞对话

    • idalib-mcp 启动后会持续输出 INFO 日志到控制台
    • 解决办法：使用 scripts/start.ps1（-WindowStyle Hidden 后台静默启动）
    • 脚本会等待服务就绪后自动退出，不阻塞对话

  4. MCP 服务器名不能用横线

    • 之前用 ida-pro-mcp 作为服务器名，可能引起工具注册问题
    • 当前配置：服务器名 idapro，工具前缀 idapro_*

  5. Remote HTTP vs Local Stdio

    • type:"local"（stdio）模式：idalib_open 同样有 schema 校验问题
    • type:"remote"（HTTP）模式：可以先用脚本直开文件，再用 MCP 工具
    • 当前方案：Remote HTTP 模式

  6. PR #389 修复了部分 schema 问题

    • 作者 mrexodia 在 issue #388 后通过 PR #389 合并了修复
    • 修复了 HTTP 模式下的 structuredContent schema，但 部分代码 AI 客户端 侧校验仍有问题
    • 已安装最新 main 分支版本

  7. idalib 超时留下孤儿 worker 进程锁文件

    • 第一次 open.ps1 超时后，idalib 的 python worker 子进程可能变成孤儿，咬着 .id0/.id1/.nam 不放
    • 后续任何工具或手动拖入 IDA GUI 都会报"权限不足"
    • 禁止 taskkill /F /T 杀进程树——/T 会把 GUI ida.exe 子进程一起干掉
    • 解决办法：start.ps1 只在端口无人监听、或 tools/list 快速返回但缺 py_eval（旧 supervisor）时替换 managed supervisor；RPC 超时且 13337 仍在听视为忙，不杀。开库时 open.ps1 写 opening.lock，watchdog 不得 -Force
    • 死锁例外：tools/list 连续失败超过 3 分钟（按 last-healthy 时间戳，不是进程创建时间），且没有 in-flight opening.lock、不是 GUI 占端口时，才 -Force 替换 supervisor，仍不杀 ida.exe
    • 兜底：open.ps1 检测到旧库被锁自动复制到 Temp 并加 GUID 前缀

Read the full file on GitHub · 405 lines

Files

What ships with it

10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago Changed · +8 lines c6103d51f982
  2. 5d ago First seen · 397 lines · 176 tokens per session scan A 0ab87f146dc8

Subscribe to this mod's changes

ida-reverse is a skill published in the GitHub repository zhaoxuya520/reverse-skill (35,183 stars, last pushed 5d ago), licensed MIT. It adds 176 tokens to every session and 6,033 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

DebuggingSecurity
Related

Other skills, from other repositories

debug-optimize-lcp

Guides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks about LCP performance, slow page loads, Core Web Vitals optimization, or wants to understand why their page's main content takes too long to appear. Also use when the user mentions…

ChromeDevTools/chrome-devtools-mcp · 99 tokens

systematic-debugging

Use when debugging a failing test, build error, or runtime issue that isn't immediately obvious. Guides a 4-phase root cause analysis instead of random fix attempts.

open-metadata/OpenMetadata · 37 tokens

diagnose

Trace from a reproduced symptom to the source code that causes it. Pin the specific file and approximate line, rate confidence in the cause and clarity of the fix independently, and always propose a concrete fix.

emdash-cms/emdash · 43 tokens

repro-admin

Reproduce an EmDash admin UI bug. Attach a container, start the demo dev server, drive the admin with agent-browser using the dev-bypass session, and capture the reproduction as screenshots plus a replayable transcript.

emdash-cms/emdash · 48 tokens

log-error-digest

Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports. Supports JSON, syslog, and Nginx formats with automatic detection. Use when a user uploads a .log file and asks to analyze errors, find patterns, debug issues, or…

zebbern/claude-code-guide · 71 tokens

byted-util-volcengine-detect-retry

An orchestration workflow for Volcengine Cloud Detect, a service that checks websites or network endpoints from test locations.

bytedance/agentkit-samples · 101 tokens