This wraps Ghidra's headless analyzer so you can decompile binaries and extract functions, strings, and call graphs without opening the GUI. You get a set of export scripts that dump everything to JSON and text files: ExportAll.java for comprehensive analysis, or individual scripts for specific tasks like decompiling to C or mapping function relationships. Especially useful when you need to batch process firmware samples or integrate reverse engineering into your workflow. The wrapper handles project creation and cleanup automatically, which saves you from dealing with Ghidra's project management quirks. Works well for initial triage on unknown binaries or when you need machine-readable output for further analysis.

skills.sh installs
686
GitHub stars
3.2K
last updated
Aug 21, 2026

Install

$ npx -y skills add mitsuhiko/agent-stuff --skill ghidra --agent claude-code

Installs into .claude/skills of the current project.

Files

Ghidra Headless Analysis Skill

Perform automated reverse engineering using Ghidra's analyzeHeadless tool. Import binaries, run analysis, decompile to C code, and extract useful information.

Quick Reference

TaskCommand
Full analysis with all exportsghidra-analyze.sh -s ExportAll.java -o ./output binary
Decompile to C codeghidra-analyze.sh -s ExportDecompiled.java -o ./output binary
List functionsghidra-analyze.sh -s ExportFunctions.java -o ./output binary
Extract stringsghidra-analyze.sh -s ExportStrings.java -o ./output binary
Get call graphghidra-analyze.sh -s ExportCalls.java -o ./output binary
Export symbolsghidra-analyze.sh -s ExportSymbols.java -o ./output binary
Find Ghidra pathfind-ghidra.sh

Prerequisites

  • Ghidra must be installed. On macOS: brew install --cask ghidra
  • Java (OpenJDK 17+) must be available

The skill automatically locates Ghidra in common installation paths. Set GHIDRA_HOME environment variable if Ghidra is installed in a non-standard location.


Main Wrapper Script

./scripts/ghidra-analyze.sh [options] <binary>

Sponsors

Details

Repository
github.com/mitsuhiko/agent-stuff
Category
AI & Agent Building
First seen
Jun 3, 2026

More from mitsuhiko/agent-stuff

All 6
1new-silvermoon avatarkotlin-concurrency-expertnew-silvermoon/awesome-android-agent-skillsKotlin Coroutines review and remediation for Android. Use when asked to review concurrency usage, fix coroutine-related bugs, improve thread safety, or resolve 684skills.sh installs
2aj-geddes avatarbusiness-case-developmentaj-geddes/useful-ai-promptsBuild compelling business cases to justify investments and secure funding. Quantify benefits, assess costs, manage risks, and present compelling ROI arguments t683skills.sh installs
3aj-geddes avatarreact-component-architectureaj-geddes/useful-ai-promptsDesign scalable React components using functional components, hooks, composition patterns, and TypeScript. Use when building reusable component libraries and ma683skills.sh installs
4mitsuhiko avatarweb-browsermitsuhiko/agent-stuffAutomate and interact with web pages through Chrome or Chromium using the Chrome DevTools Protocol (CDP): navigate, click, fill forms, inspect content, take scr683skills.sh installs
5aj-geddes avatardocker-containerizationaj-geddes/useful-ai-promptsCreate optimized Docker containers with multi-stage builds, security best practices, and minimal image sizes. Use when containerizing applications, creating Doc681skills.sh installs
6databricks avatardatabricks-serverless-migrationdatabricks/databricks-agent-skillsMigrate Databricks workloads from classic compute to serverless compute. Use when migrating notebooks, jobs, pipelines, or Scala JARs (`spark_jar_task`) from cl681skills.sh installs