skills/mukul975/anthropic-cybersecurity-skills/reverse-engineering-malware-with-ghidra/Gen Agent Trust Hub
reverse-engineering-malware-with-ghidra
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external binary analysis tools, specifically Ghidra's headless analyzer and Radare2, to automate malware triage tasks. Evidence in scripts/agent.py: The run_ghidra_headless function constructs a command list and uses subprocess.run to invoke the analyzeHeadless utility.
- [DYNAMIC_EXECUTION]: The skill generates a temporary Python script at runtime to facilitate automated data extraction within the Ghidra environment. Evidence in scripts/agent.py: The export_functions_ghidra function creates export_functions.py from a hardcoded template and passes it to Ghidra as a post-script for execution.
Audit Metadata