trailofbits avatar

Dwarf Expert

If you're debugging why gdb is showing garbage variable names or building tools that need to parse debug symbols from compiled binaries, this gives Claude expertise in DWARF format versions 3 through 5. It'll help you use dwarfdump and llvm-dwarfdump for verification, write code with libraries like libdwarf or pyelftools, or just answer questions about what DW_TAG_subprogram actually means. The skill knows to point you at dwarfstd.org for spec details and LLVM's implementation as a reference. It won't help with actual runtime debugging (use gdb for that) or reverse engineering binaries, just understanding and working with the DWARF debug format itself.

skills.sh installs
5.6K
GitHub stars
8.1K
last updated
Aug 21, 2026

Install

$ npx -y skills add trailofbits/skills --skill dwarf-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

DWARF Expert

Expertise for DWARF debug info: parsing and searching it, verifying its integrity, answering questions about the standard, and writing code that consumes it. Out of scope: runtime debugging (use gdb/lldb), reverse engineering beyond the DWARF sections (use Ghidra/IDA), and compiler-specific DWARF generation bugs.

Authoritative Sources

When precision matters, look standard details up instead of answering from memory:

  1. dwarfstd.org — the official specification. Web-search specific sections, e.g. "DWARF5 DW_TAG_subprogram attributes site:dwarfstd.org".
  2. LLVM — llvm/lib/DebugInfo/DWARF/ is a reliable reference implementation: DWARFDie.cpp (DIE and attribute access), DWARFUnit.cpp (compilation units), DWARFDebugLine.cpp (line tables), DWARFVerifier.cpp (validation).
  3. libdwarf — the reference C implementation at github.com/davea42/libdwarf-code.

Parsing and Searching with dwarfdump

Sponsors

Details

Repository
github.com/trailofbits/skills
Categories
Documentation, Release Management, Debugging

More from trailofbits/skills

All 82
1jeffallan avatarplaywright-expertjeffallan/claude-skillsUse when writing E2E tests with Playwright, setting up test infrastructure, or debugging flaky browser tests. Invoke to write test scripts, create page objects,5.6Kskills.sh installs
2affaan-m avatarcode-touraffaan-m/eccCreate CodeTour `.tour` files — persona-targeted, step-by-step walkthroughs with real file and line anchors. Use for onboarding tours, architecture walkthroughs5.5Kskills.sh installs
3forcedotcom avatarintegration-connectivity-connected-app-configureforcedotcom/sf-skillsSalesforce Connected Apps and External Client Apps OAuth configuration with 120-point scoring. Use this skill to configure OAuth flows, JWT bearer auth, Connect5.5Kskills.sh installs
4aws avatarmanaging-amazon-mskaws/agent-toolkit-for-awsOperates Amazon MSK Provisioned clusters (Standard and Express brokers). Required for ANY MSK Provisioned task — training data conflates Standard and Express, w5.5Kskills.sh installs
5trailofbits avataryara-rule-authoringtrailofbits/skillsGuides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming convent5.5Kskills.sh installs
6affaan-m avatarcustoms-trade-complianceaffaan-m/eccCodified expertise for customs documentation, tariff classification, duty optimization, restricted party screening, and regulatory compliance across multiple ju5.5Kskills.sh installs