create-rule
Create Cursor rules for persistent AI guidance. Use when the user wants to create a rule, add coding standards, set up project…
@coco-researchInstall SkillDevelopment
Skill
/ghidra-reverse
Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.
Claude Code
$ npx -y skills add coco-research/coco --skill ghidra-reverse --agent claude-code
Codex
$ npx skills add coco-research/coco --skill ghidra-reverse -a codex -y
Cursor
$ npx skills add coco-research/coco --skill ghidra-reverse -a cursor -y
Gemini CLI
$ npx skills add coco-research/coco --skill ghidra-reverse -a gemini-cli -y
GitHub Copilot
$ npx skills add coco-research/coco --skill ghidra-reverse -a github-copilot -y
OpenCode
$ npx skills add coco-research/coco --skill ghidra-reverse -a opencode -y
Windsurf
$ npx skills add coco-research/coco --skill ghidra-reverse -a windsurf -y
SKILL.md
ghidra-reverse.SKILL.mdname: ghidra-reverse description: Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable. user-invocable: true
Ghidra Reverse Engineering
适用场景
- 无 IDA 许可证时的主逆向入口
- 批量 headless 分析 / CI 中反编译
- Ghidra 脚本（Java/Python Jython/PyGhidra）自动化
- 与 `binary-diff` / `patch-diff-exploit` 的 ghidriff 联动
与 IDA 分工
| 需求 | 优先 | |------|------| | 已有 IDA MCP 深挖 | `ida-reverse/` | | 开源 / 批量 / 教学 | **本 skill** | | 仅 CLI 快速侦察 | `radare2/` |
工作流
1. 项目与自动分析
□ 新建 Project → Import 文件 → Analyze（默认分析器） □ 记录语言/编译器识别结果与基址 □ 标记入口、导出表、字符串 xref
2. 关键函数
□ 从字符串 / 导入 API 反查 □ Decompile 窗口还原算法 □ 重命名函数/变量；写 Plate comment □ 需要动态时交接 Frida/GDB（reverse-engineering 动态章）
3. Headless（批量）
# 示例：analyzeHeadless 路径因安装而异，MUST 确认本机实际安装路径 analyzeHeadless /path/to/project Proj -import sample.bin -postScript ExportDecomp.py
4. MCP（若已配置）
□ 确认 ghidra MCP 端口（常见 8765，以实际环境为准） □ 用 MCP 工具拉反编译 / xrefs，禁止猜端口
工具链
| 工具 | 用途 | |------|------| | Ghidra | 反编译主工具 | | ghidra-mcp | AI 桥 | | ghidriff | 补丁差分，见 `patch-diff-exploit` |
参考
- `references/ghidra-cheatsheet.md`
- `../ida-reverse/` `../radare2/` `../binary-diff/`
Ships withcoco
495 personas across 13 departments, 229 skills[^installed] and 388 commands in the full catalog (coco 1.9.0, 2026-10-21). Agent skills, slash commands and subagents for Claude Code, Cursor, Codex and other AI coding agents.
631200 skills53 agents
Stars on GitHub
Momentum
- stars in total
- 631
Other skills on coco.
@coco-researchInstall Skillcreate-skill
Guides users through creating effective Agent Skills for Cursor. Use when the user wants to create, write, or author a new skill,…
@coco-researchInstall Skillcreate-subagent
Create custom subagents for specialized AI tasks. Use when the user wants to create a new type of subagent, set up task-specific…
@coco-researchInstall Skillmigrate-to-skills
Convert 'Applied intelligently' Cursor rules (.cursor/rules/*.mdc) and slash commands (.cursor/commands/*.md) to Agent Skills…
@coco-researchInstall Skillupdate-cursor-settings
Modify Cursor/VSCode user settings in settings.json. Use when the user wants to change editor settings, preferences,…
@coco-researchInstall Skillagent-lightning
Train and optimize AI agents using Microsoft's Agent Lightning framework with reinforcement learning. Use when setting up agent…
@coco-researchInstall SkillMore skills from other plugins.
Auto-invoked
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or…
@obraInstall Skillask-matt
Ask which skill or flow fits your situation. A router over the skills in this repo.
@mattpocockInstall SkillAuto-invoked
Questions about ghidra-reverse.
- Which coding agents can use ghidra-reverse?
- ghidra-reverse installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.