grep

Installation
SKILL.md

Links: when an answer names functions, addresses, strings or types, make them clickable on IDA 9.4 builds: [name](uri) from the deep_links table, outside code blocks (skill deep-links).

grep is IDASQL's entity-search surface. Use it to discover named functions, labels, segments, structs, enums, and members before pivoting into xrefs, decompiler, or type work.


Trigger Intents

Use this skill when user asks to:

  • find functions, labels, types, or members by name
  • search by prefix/substring like sub_, EH, Zw, CreateFile, or main
  • page through search results quickly
  • seed table-native xref/decompiler/type workflows from name discovery

Route to:

  • xrefs after locating a candidate callee/import/function and needing callers/callees/references
  • decompiler after choosing a candidate function to inspect semantically
  • types when the hit is a struct/enum/member you need to inspect or edit
Installs
49
GitHub Stars
49
First Seen
Mar 19, 2026