Ghidra Core: AI Agent Skill for Advanced Code Execution

Ghidra Core: AI Agent Skill for Advanced Code Execution

The Ghidra Core skill provides an execution engine for advanced code analysis tasks using the Ghidra platform. This skill supports seamless command execution related to importing, decompiling, disassembling, renaming, patching, and version tracking within Ghidra. It serves as the central command and knowledge repository for executing Ghidra-specific instructions through AI coding agents like Claude Code, Cursor, and Codex.

What this skill does

• Facilitates RPC-driven execution of Ghidra commands using the rpc_driver/ghidra-rpc command set.
• Manages daemon processes for starting and stopping Ghidra sessions.
• Performs environment diagnostics through a built-in doctor check to ensure readiness for tasks.
• Provides a comprehensive script list to streamline the execution of various Ghidra operations.
• Logs observations and conclusions using the integrated ledger.py tool.

Who it is for

This skill is designed for developers and technical teams who use AI coding agents and require advanced Ghidra functionality for reverse engineering tasks. It benefits those engaged in security research, reverse engineering, and software vulnerability assessments.

Use cases

• Re-triaging unknown software samples to assess potential risks or vulnerabilities.
• Conducting static analysis and patch operations for code delivery.
• Executing detailed vulnerability audits using organized command routes.
• Supporting reverse engineering activities by providing a guided process for executing Ghidra commands.

Technical details

• Operates within environments set up with WSL/Linux, using paths such as /opt/ghidra and various Python virtual environments.
• Relies on a patched version of the Ghidra RPC daemon, based on Cellebrite Labs version 0.2.0.
• Integrates with system tools available in the PATH environment for seamless command execution.
• Compatible with AI agents such as Claude Code, Cursor, and Codex, providing command execution capabilities specific to Ghidra's architecture.

For authorised security testing, defensive research and educational use only.

Source & Licence

This package is built on open-source work published by Cristallin2006 (Cristallin2006/ghidra-skill-for-dsh) and distributed under MIT. The original licence text and copyright notice are included in your download.

Personal and commercial use, modification and redistribution are permitted, provided the original copyright and licence notice are retained.

Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.

Delivery & Support

• Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
• Format: ZIP archive containing the skill files, documentation and the original licence.
• Support: support@mcpcart.com — we aim to reply within 2 business days.
• Updates: updates are included only where stated on this page.

Refunds

This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.

Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.