Maleick

Ghidra MCP Skill — AI skill for Claude Code

AI community

Ghidra MCP skill and helper CLI for AI-driven reverse engineering workflows.

How to install Ghidra MCP Skill

This entry records only its repository, not the path inside it, so there is no exact command to give. Open Maleick/ghidra-mcp-skill and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Ghidra MCP Skill does

Ghidra MCP skill and helper CLI for AI-driven reverse engineering workflows.

Alternatives in AI

  • AIHawk — Open-source AI browser agent: describe any task in plain language and it autonomously browses, clicks, types a 30.3k ★
  • Peekaboo — Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, o 3.2k ★
  • WindsurfAPI — Turn Windsurf / Devin Desktop's 100+ AI models (Claude, GPT, Gemini, DeepSeek, Kimi, GLM, SWE) into OpenAI-, A 3k ★

README

Ghidra MCP Skill

A lightweight skill and helper CLI for driving bethington/ghidra-mcp from local AI agents, headless Docker workflows, and day-to-day reverse engineering sessions.

Upstream ghidra-mcp Ghidra 12.0.3 Docker ready Python 3 Any AI

This repository is not a replacement for the upstream GhidraMCP project. It is a thin, practical layer on top of it:

  • SKILL.md gives an AI a clear workflow for working against GhidraMCP.
  • scripts/ghidra_mcp.py gives that AI a small helper CLI for health checks, container copies, program loading, analysis, and raw endpoint calls.

Why this repo exists

This repo packages the boring but necessary glue around GhidraMCP so an AI can work against it with less prompting and less manual setup.

Fast checks Headless aware Raw endpoint access AI agnostic
Verify the server in one command Handles Docker copy/load flow cleanly Call any REST endpoint without rewriting curl Works with any AI that can follow instructions or run shell commands

What is inside

File Purpose
SKILL.md The operating instructions an AI follows when using GhidraMCP
scripts/ghidra_mcp.py Helper CLI for connectivity checks, Docker copy, verify flow, and raw API access
references/endpoints.json Versioned parity catalog for the documented MCP surface