Agent skill

Binary Re

by aiskillstore in aiskillstore/marketplace

This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work.

No licenceAuto-check passedSecurity

Install Binary Re

skills CLI
$ npx skills add aiskillstore/marketplace --skill binary-re -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install aiskillstore/marketplace binary-re --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/2389-research/binary-re .claude/skills/binary-re && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
binary-re
GitHub stars
430
Used in
1 other repo
Token cost
~2.6k tokens
SKILL.md length
571 words
Files
2
Skills in repo
1,085
Repo updated
First seen
Licence
None found

At a glance

This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work.

  • Works in 5 steps: Executing the binary - Even under QEMU,… → Network operations - Prevent unintended… → Conflicting evidence - Resolve… → …
  • What does this do
  • SKILL.md covers Purpose, Related Skills, Pre-Flight Verification and Philosophy, plus 9 more sections
  • Calls docker and apt

What it does

Binary Re is an agent skill from aiskillstore/marketplace. This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work. Triggers on "binary", "executable", "ELF", "what does this do", "reverse engineer", "disassemble", "decompile", "pyc file", "python bytecode", "analyze binary", "figure out", "marshal". Routes to sub-skills for triage, static analysis, dynamic analysis, synthesis, or tool setup.

Its SKILL.md is about 2.6k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `skill-report.json`).

It sits in Security, covering Static analysis and SAST and Reverse engineering and malware. It works with Python and Ghidra. The repository describes itself as: Security-audited skills for Claude, Codex & Claude Code. One-click install, quality verified.

When your agent uses it

  • What does this do
  • Reverse engineer
  • Python bytecode

Example prompts

  • “binary”
  • “executable”
  • “what does this do”
  • “/binary-re”

Requirements

  • Python 3
  • Docker

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Executing the binary - Even under QEMU, confirm sandbox
  2. Network operations - Prevent unintended phone-home
  3. Conflicting evidence - Resolve contradictory findings
  4. Privileged operations - Device access, root actions
  5. Major direction changes - Significant analysis pivots

What it can do on your machine

Read from SKILL.md and the folder at commit 4ac52da. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • docker
    • apt

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use docker, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Binary Re loads about 2.6k tokens when it runs. Until then it costs about 103 tokens; SKILL.md has 571 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~103
When it runs · the whole SKILL.md, loaded when a task matches
~2.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 571 words (~2,650 tokens).

“Comprehensive guide for binary reverse engineering. This skill provides the overall methodology, philosophy, and reference material. Related skills handle specific phases:”

— opening of SKILL.md by aiskillstore
name
binary-re

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in skills/2389-research/binary-re of aiskillstore/marketplace.

  • SKILL.md
  • skill-report.json

Open the folder on GitHubat commit 4ac52da

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders, from 1 other GitHub owner. This page covers the copy in aiskillstore/marketplace, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Binary Re next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Binary Re compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Binary Re this skillaiskillstore/marketplace4301 repos~2.6kAutomated safety check: PassNone
Ghidra ReOrbitCurve/firmware-reverse-engineering213—~4.2kAutomated safety check: PassApache-2.0
Firmware Security ReportsOrbitCurve/firmware-reverse-engineering213—~4.1kAutomated safety check: PassApache-2.0
Analyzing Packed Malware With Upx Unpackermukul975/Anthropic-Cybersecurity-Skills34k—~3kAutomated safety check: PassApache-2.0
Analyzing Linux Elf Malwaremukul975/Anthropic-Cybersecurity-Skills34k—~3.1kAutomated safety check: WarnApache-2.0
TH08 Exact Function MatchingN0zoM1z0/th08100—~8.7kAutomated safety check: PassMIT

Similar skills

  • Ghidra Re

    OrbitCurve/firmware-reverse-engineering

    Expert-level Ghidra reverse engineering for firmware binaries with emphasis on stripped binary analysis, automated function discovery, cryptographic routine identification, authentication logic…

    213 GitHub stars~4.2k tokensUpdated 29 days ago
    SecurityAuto-check passed
  • Firmware Security Reports

    OrbitCurve/firmware-reverse-engineering

    Evidence-based security report generation for firmware assessments.

    213 GitHub stars~4.1k tokensUpdated 29 days ago
    SecurityAuto-check passed
  • Analyzing Packed Malware With Upx Unpacker

    mukul975/Anthropic-Cybersecurity-Skills

    Identifies and unpacks UPX-packed malware samples, including binaries with modified UPX magic bytes or headers that block automated decompression, to recover the original executable for static…

    34k GitHub stars~3k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Analyzing Linux Elf Malware

    mukul975/Anthropic-Cybersecurity-Skills

    Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static analysis, dynamic tracing, and…

    34k GitHub stars~3.1k tokensUpdated 1 mo ago
    SecurityAuto-check: warnings
  • Builds TH08 functions with the repository's VC7 toolchain and compares each against the hash-attested 1.00d binary to tune code generation and verify exact matches.

    100 GitHub stars~8.7k tokensUpdated 18 days ago
    DevelopmentAuto-check passed
  • CodeQL Security Scan

    trailofbits/skills

    Official

    Scans a codebase for vulnerabilities with CodeQL's data flow and taint tracking in run-all or important-only modes, including data extensions for project-specific sources and sinks.

    7.4k GitHub stars~4.6k tokensUpdated 5 days ago
    SecurityAuto-check: notes

More from aiskillstore/marketplace

All 1,085 skills in this repo
  • Code Stats

    aiskillstore/marketplace

    Analyze codebase with tokei (fast line counts by language) and difft (semantic AST-aware diffs).

    430 GitHub starsUsed in 2 repos~697 tokens
    Auto-check: notes
  • Data Processing

    aiskillstore/marketplace

    Process JSON with jq and YAML/TOML with yq. An agent skill from aiskillstore/marketplace.

    430 GitHub starsUsed in 1 repo~720 tokens
    Auto-check: notes
  • Doc Scanner

    aiskillstore/marketplace

    Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.

    430 GitHub starsUsed in 1 repo~644 tokens
    Auto-check: notes
  • File Search

    aiskillstore/marketplace

    Modern file and content search using fd, ripgrep (rg), and fzf.

    430 GitHub starsUsed in 1 repo~598 tokens
    Auto-check: notes
  • Find Replace

    aiskillstore/marketplace

    Modern find-and-replace using sd (simpler than sed) and batch replacement patterns.

    430 GitHub starsUsed in 1 repo~527 tokens
    Auto-check: notes
  • Investigating Codebases

    aiskillstore/marketplace

    Automatically activated when user asks how something works, wants to understand unfamiliar code, needs to explore a new codebase, or asks questions like "where is X implemented?", "how does Y…

    430 GitHub starsUsed in 1 repo~2.7k tokens
    Auto-check: notes

Works with

Categories

Questions about Binary Re

What does Binary Re do?

This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work. Binary Re is an agent skill from aiskillstore/marketplace. This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work.

When should I use Binary Re?

Binary Re fits situations like: what does this do; reverse engineer; Python bytecode.

How do I install Binary Re in Claude Code?

Run `npx skills add aiskillstore/marketplace --skill binary-re -a claude-code`. Or copy the skill folder (skills/2389-research/binary-re in aiskillstore/marketplace) into .claude/skills/binary-re in your project. Claude Code loads it when a task matches its description.

How do I install Binary Re in Codex?

Run `npx skills add aiskillstore/marketplace --skill binary-re -a codex`. Or copy the skill folder (skills/2389-research/binary-re in aiskillstore/marketplace) into .agents/skills/binary-re in your project. Codex loads it when a task matches its description.

Can I use Binary Re in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiskillstore/marketplace --skill binary-re -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/binary-re, .gemini/skills/binary-re, .github/skills/binary-re and .opencode/skills/binary-re in your project.

What does Binary Re need to run?

Going by SKILL.md and its folder, Binary Re needs the command-line tools its instructions call (docker and apt). Our summary lists: Python 3; Docker.

Does Binary Re access the network?

SKILL.md contains no URLs. Its commands use docker, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Binary Re safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Binary Re use?

No licence was found for Binary Re or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Binary Re use?

About 2.6k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Binary Re?

Skills that share tags, products or a category with Binary Re: Ghidra Re (OrbitCurve/firmware-reverse-engineering, 213 stars), Firmware Security Reports (OrbitCurve/firmware-reverse-engineering, 213 stars), Analyzing Packed Malware With Upx Unpacker (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Analyzing Linux Elf Malware (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Binary Re?

aiskillstore (a GitHub organization) maintains it in aiskillstore/marketplace, which has 430 GitHub stars. The repository holds 1,085 skills in this directory. The repository was last updated on October 7, 2026.

Source: aiskillstore/marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.