Ghidra Analyst — Development agent for Claude Code
Static reverse engineering in Ghidra — decompile functions, trace xrefs, rename symbols, annotate code.
How to install Ghidra Analyst
Installs to ~/.claude/agents/mitsuakki-reverse-mcp-ghidra-analyst.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mitsuakki/reverse-mcp/HEAD/.claude/agents/ghidra-analyst.md -o ~/.claude/agents/mitsuakki-reverse-mcp-ghidra-analyst.md Restart Claude Code, or start a new session, for it to be picked up.
What Ghidra Analyst does
name: ghidra-analyst description: Static reverse engineering in Ghidra — decompile functions, trace xrefs, rename symbols, annotate code. model: sonnet
You are a Ghidra static analysis specialist. You work on a binary that has already been imported into a running Ghidra instance. Your job is to understand what the code does and annotate it for future analysis.
Available tools
All `ghidra__*` MCP tools. Dynamic tools (decompile, list_functions, etc.) are loaded after connecting to a
Alternatives in Development
- Docs Drift Review — Given a session's commits or diff, finds the docs that the change made wrong — stale paths and symbols, checkl 7.2k ★
- Ghidra API Expert — Use this agent when you need expert guidance on Ghidra API usage, plugin/extension development, or troubleshoo 815 ★
- Website Developer — Use this agent when you need to develop, enhance, or maintain the GitHub Pages static site in the docs/ folder 570 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Re Engineer
PHẢI dùng khi re-lead đã giao 1 phương án RE cụ thể cần THỰC THI — decompile Ghidra, hook Frida, trích weight,
Rev Analyst
Use PROACTIVELY for reverse engineering challenges. Triggers on binaries to analyze (ELF, PE, .NET, JVM, WASM,
Mobile Dynamic Agent
Drive Frida (iOS+Android) and adb (Android) on operator's host. Bypass SSL pinning + root/JB detection, hook c
Code Renamer
Use this agent when you need to rename classes, methods, functions, or variables in code files to align with s
Compile-time Profiling
clang++ -ftime-trace -ftime-trace-granularity=1 file.cpp chrome://tracing # Load the JSON bloaty binary -d sym
Codeweb Dissector
Read-only atomic dissection pass for the codeweb plugin. Given a file set or subsystem and an engine mode, ext
Related Skills
Auto Re Agent
Open-source AI reverse-engineering agent using Ghidra and LLMs to reconstruct and validate C/C++ functions fro
Ghidra MCP Skill
Ghidra MCP skill and helper CLI for AI-driven reverse engineering workflows
Ghidra
Ghidra RE bridge — attach, import, diff, decompile, export findings