MCP Server Builder
anthropics/skills
Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.
Decompile a function to C-like pseudocode using angr. An agent skill from dariushoule/x64dbg-skills.
MITAuto-check: notes
Install Decompile
$ npx skills add dariushoule/x64dbg-skills --skill decompile -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install dariushoule/x64dbg-skills decompile --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/dariushoule/x64dbg-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/decompile .claude/skills/decompile && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "decompile" agent skill from https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile into .claude/skills/decompile/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "decompile", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompileType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add dariushoule/x64dbg-skills --skill decompile -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install dariushoule/x64dbg-skills decompile --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dariushoule/x64dbg-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/decompile .agents/skills/decompile && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "decompile" agent skill from https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile into .agents/skills/decompile/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "decompile", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add dariushoule/x64dbg-skills --skill decompile -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install dariushoule/x64dbg-skills decompile --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dariushoule/x64dbg-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/decompile .cursor/skills/decompile && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "decompile" agent skill from https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile into .cursor/skills/decompile/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "decompile", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/dariushoule/x64dbg-skills.git --path skills/decompile--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add dariushoule/x64dbg-skills --skill decompile -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install dariushoule/x64dbg-skills decompile --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dariushoule/x64dbg-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/decompile .gemini/skills/decompile && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "decompile" agent skill from https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile into .gemini/skills/decompile/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "decompile", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install dariushoule/x64dbg-skills decompileInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add dariushoule/x64dbg-skills --skill decompile -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/dariushoule/x64dbg-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/decompile .github/skills/decompile && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "decompile" agent skill from https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile into .github/skills/decompile/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "decompile", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add dariushoule/x64dbg-skills --skill decompile -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install dariushoule/x64dbg-skills decompile --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dariushoule/x64dbg-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/decompile .opencode/skills/decompile && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "decompile" agent skill from https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile into .opencode/skills/decompile/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "decompile", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
decompile- GitHub stars
- 209
- Token cost
- ~626 tokens
- SKILL.md length
- 318 words
- Files
- 2
- Skills in repo
- 7
- Repo updated
- First seen
- Licence
- MIT
At a glance
Decompile a function to C-like pseudocode using angr. An agent skill from dariushoule/x64dbg-skills.
- Works in 6 steps: Check prerequisites → Verify debugger connection → Determine target function address → …
- Runs Python scripts from its folder; calls pip and python
What it does
Decompile is an agent skill from dariushoule/x64dbg-skills. Decompile a function to C-like pseudocode using angr
Its SKILL.md is about 630 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `decompile.py`).
It works with Model Context Protocol. The repository describes itself as: Claude Code plugin providing skills for x64dbg debugger automation. The licence is MIT.
Example prompts
- “/decompile”
Requirements
- Python 3
- Pre-approved tools (allowed-tools): mcp__x64dbg__get_debugger_status, mcp__x64dbg__get_register, mcp__x64dbg__eval_expression, mcp__x64dbg__get_symbol, Bash, Read
Workflow steps
6 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 0409f53. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves these tools, so the agent can use them without asking each time:
mcp__x64dbg__get_debugger_statusmcp__x64dbg__get_registermcp__x64dbg__eval_expressionmcp__x64dbg__get_symbolBashRead
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships script files (Python), which the agent can run.
Shell commands in SKILL.md call:
pippython
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use pip, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Decompile loads about 626 tokens when it runs. Until then it costs about 16 tokens; SKILL.md has 318 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
allowed-tools: mcp__x64dbg__get_debugger_status, mcp__x64dbg__get_register, mcp__x64dbg__eval_expression, mcp__x64d
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from dariushoule/x64dbg-skills at commit 0409f53, republished under its MIT licence (© dariushoule). 318 words, ~626 tokens.
Download SKILL.mdSave it as
.claude/skills/decompile/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.- name
- decompile
- description
- Decompile a function to C-like pseudocode using angr
- allowed-tools
- mcp__x64dbg__get_debugger_status, mcp__x64dbg__get_register, mcp__x64dbg__eval_expression, mcp__x64dbg__get_symbol, Bash, Read
decompile
Decompile a function from the debugged binary into C-like pseudocode using angr.
If no address is specified, decompiles the function containing the current instruction pointer. Accepts an address or symbol name as an argument.
Instructions
Follow these steps exactly:
1. Check prerequisites
Run pip show angr via Bash. If angr is not installed, tell the user:
angr is not installed. Install it with
pip install angr(requires Python >= 3.10). Note: angr is a large package (~500MB+).
Then stop.
2. Verify debugger connection
Call mcp__x64dbg__get_debugger_status to confirm the debugger is connected and paused. If not debugging, tell the user and stop.
3. Determine target function address
If the user provided an address or symbol as an argument:
- If it looks like a hex address, use it directly
- If it looks like a symbol name, resolve it via
mcp__x64dbg__eval_expression
If no argument was provided:
- Get the current instruction pointer via
mcp__x64dbg__get_register(registerripfor 64-bit,eipfor 32-bit) - Use the current RIP/EIP value as the target address
Call this resolved value target_addr.
4. Resolve module path and compute RVA
Use mcp__x64dbg__eval_expression to evaluate:
mod.path(target_addr)— to get the on-disk path of the module containing the addressmod.base(target_addr)— to get the module's base address
Compute the RVA: target_addr - module_base
If mod.path fails, the address may not belong to a loaded module. Tell the user and stop.
5. Run the decompile script
Execute:
python "${CLAUDE_PLUGIN_ROOT}\skills\decompile\decompile.py" --binary "<module_path>" --address <rva_hex>Where:
<module_path>is the on-disk path from step 4<rva_hex>is the RVA in hex (e.g.0x1060)
The script may take 10-30 seconds for large binaries (CFG generation is the bottleneck). Use a timeout of at least 120 seconds.
6. Present results
The script outputs decompiled C pseudocode to stdout and status messages to stderr.
Present the decompiled code to the user in a ```c code block. If the script failed, relay the error message from stderr (e.g., function not found, decompilation failed) and suggest nearby functions if listed.
© dariushoule, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 1 other file in skills/decompile of dariushoule/x64dbg-skills.
- SKILL.md
- decompile.py
Open the folder on GitHubat commit 0409f53
Compare with similar skills
Decompile next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Decompile this skilldariushoule/x64dbg-skills | 209 | — | ~626 | Automated safety check: Notes | MIT | |
| MCP Server Builderanthropics/skills | 180k | 64 repos | ~2.3k | Automated safety check: Pass | Apache-2.0 | |
| MCP Server BuildershareAI-lab/learn-claude-code | 78k | 5 repos | ~1.2k | Automated safety check: Pass | MIT | |
| MCP Integration for Pluginsanthropics/claude-plugins-official | 38k | 11 repos | ~3.1k | Automated safety check: Pass | Apache-2.0 | |
| Figma use_figma Plugin API Ruleswarpdotdev/warp | 65k | 4 repos | ~4.4k | Automated safety check: Pass | AGPL-3.0 | |
| Stitch to Remotion Walkthrough Videosgoogle-labs-code/stitch-skills | 8.4k | 6 repos | ~3.2k | Automated safety check: Notes | Apache-2.0 |
Similar skills
- Official
MCP Server Builder
shareAI-lab/learn-claude-code
Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.
- Official
MCP Integration for Plugins
anthropics/claude-plugins-official
Explains how to bundle Model Context Protocol servers in a Claude Code plugin, covering config files, stdio, SSE, HTTP and WebSocket server types, and authentication.
Figma use_figma Plugin API Rules
warpdotdev/warp
Required groundwork before any use_figma call: the rules and reference files for running JavaScript in a Figma file through the Plugin API without common failures.
- Official
Stitch to Remotion Walkthrough Videos
google-labs-code/stitch-skills
Builds walkthrough videos from Stitch design projects using Remotion, with transitions, zoom effects and text overlays on each screen.
MCP Development
coollabsio/coolify
A skill your agent uses for Laravel MCP development. An agent skill from coollabsio/coolify.
More from dariushoule/x64dbg-skills
State Diff
dariushoule/x64dbg-skills
Compare two state snapshots to identify register and memory changes between two points in time
State Snapshot
dariushoule/x64dbg-skills
Capture a full debuggee state snapshot (all committed memory regions + processor state) to disk for offline analysis
Tracealyzer
dariushoule/x64dbg-skills
Trace execution (into or over calls) for N steps or until a condition, then analyze the recorded instruction log
Vuln Hunter
dariushoule/x64dbg-skills
Hunt for vulnerabilities in a running debuggee by analyzing imports/exports, triaging attack surface, and iteratively testing for bugs with PoC generation.
Yara Sigs
dariushoule/x64dbg-skills
Scan a state snapshot's memory dumps with YARA signatures to detect packers, crypto constants, malware, and more
Find Oep
dariushoule/x64dbg-skills
Smart trace-based OEP finder for packed/protected PE executables.
Related
Works with
Questions about Decompile
What does Decompile do?
Decompile a function to C-like pseudocode using angr. An agent skill from dariushoule/x64dbg-skills. Decompile is an agent skill from dariushoule/x64dbg-skills.
How do I install Decompile in Claude Code?
Run `npx skills add dariushoule/x64dbg-skills --skill decompile -a claude-code`. Or copy the skill folder (skills/decompile in dariushoule/x64dbg-skills) into .claude/skills/decompile in your project. Claude Code loads it when a task matches its description.
How do I install Decompile in Codex?
Run `npx skills add dariushoule/x64dbg-skills --skill decompile -a codex`. Or copy the skill folder (skills/decompile in dariushoule/x64dbg-skills) into .agents/skills/decompile in your project. Codex loads it when a task matches its description.
Can I use Decompile in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add dariushoule/x64dbg-skills --skill decompile -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/decompile, .gemini/skills/decompile, .github/skills/decompile and .opencode/skills/decompile in your project.
What does Decompile need to run?
Going by SKILL.md and its folder, Decompile needs Python for the scripts in its folder and the command-line tools its instructions call (pip and python). Our summary lists: Python 3. Its frontmatter pre-approves these tools: mcp__x64dbg__get_debugger_status, mcp__x64dbg__get_register, mcp__x64dbg__eval_expression, mcp__x64dbg__get_symbol, Bash, Read.
Does Decompile access the network?
SKILL.md contains no URLs. Its commands use pip, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Decompile safe to install?
Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Decompile use?
Decompile is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Decompile use?
About 626 tokens (SKILL.md is roughly 2.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Decompile?
Skills that share tags, products or a category with Decompile: MCP Server Builder (anthropics/skills, 180k stars), MCP Server Builder (shareAI-lab/learn-claude-code, 78k stars), MCP Integration for Plugins (anthropics/claude-plugins-official, 38k stars) and Figma use_figma Plugin API Rules (warpdotdev/warp, 65k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Decompile?
dariushoule (a GitHub user) maintains it in dariushoule/x64dbg-skills, which has 209 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on March 13, 2026.
Source: dariushoule/x64dbg-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.