The Agent Skills Directory

[DATA_EXFILTRATION]: The MCP server is configured to listen on all network interfaces (0.0.0.0:13897) by default. This permits any device on the local network to connect and use the provided tools to extract disassembly, decompiled code, and memory contents from IDA Pro without authentication.
[PRIVILEGE_ESCALATION]: The skill provides instructions and tools (kernel_read_memory, kernel_list_modules) to load and interact with a Windows kernel driver (iida-mcp-ioctl.sys). Using sc create and sc start for driver management represents a high-privilege operation that extends the agent's capabilities to kernel-mode memory access.
[COMMAND_EXECUTION]: The skill includes tools to modify the database state, such as patch_bytes, rename, and set_type. These allow for direct modification of binary data and symbol information within the research environment.
[COMMAND_EXECUTION]: The documentation provides shell commands for installing the capstone library and managing the kernel driver, which the agent may be prompted to execute on the host.
[INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect injection as it processes untrusted binary data and kernel memory. Ingestion points: Files opened in IDA Pro (via read_bytes, list_functions, etc.) and live kernel memory (via kernel_read_memory). Boundary markers: Absent; tool outputs are returned directly to the agent's context. Capability inventory: Powerful modification tools including patch_bytes and rename. Sanitization: Absent; no evidence of filtering or escaping strings extracted from the binary before processing.
[EXTERNAL_DOWNLOADS]: The installation process involves manual placement of plugin files and the iida-mcp-ioctl.sys driver, as well as downloading third-party Python packages (capstone) into the IDA environment.

iida-mcp-ida-integration