CtrlK
BlogDocsLog inGet started
Tessl Logo

ghidra

Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.

64

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/ghidra/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable and well-structured with executable commands and real referenced bundle files, but batch workflows lack validation checkpoints and some inline script detail could be split out.

Suggestions

Add validation checkpoints to the batch/multiple-binary workflow (e.g. check exit codes, verify expected output files exist before proceeding).

Add an explicit pointer to the scripts/ghidra_scripts/ directory for the full Java source of each export script rather than only inlining their outputs.

Trim the Tips section's generic advice to keep the token budget lean.

DimensionReasoningScore

Conciseness

Mostly efficient with a quick-reference table and command examples; minor padding in the Tips section ('Decompilation isn't perfect') that could be trimmed.

4 / 5

Actionability

Copy-paste ready commands throughout, concrete script invocations, a JSON output schema example, and worked workflows covering common cases (unknown binary, firmware, quick listing, batch).

5 / 5

Workflow Clarity

Workflows are sequenced (mkdir -> run -> review) but the batch 'Analyze Multiple Binaries' loop and other operations lack validation checkpoints, capping workflow clarity at 3 per the batch/destructive guideline.

3 / 5

Progressive Disclosure

Well-organized sections with one-level-deep references to real bundle scripts (ghidra-analyze.sh, find-ghidra.sh, ExportX.java verified present in scripts/ghidra_scripts/); minor gaps in explicit navigation pointers to the script sources.

4 / 5

Total

16

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and distinctive with strong concrete action verbs, but it omits explicit 'when to use' trigger guidance, leaving Claude without activation cues.

Suggestions

Add a 'Use when...' clause naming trigger situations, e.g. 'Use when analyzing unknown binaries, malware, or firmware, or when the user mentions decompiling or reverse engineering.'

Include common file extensions and synonyms (ELF, .exe, .bin, disassemble) to improve trigger term coverage.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'Reverse engineer binaries', 'Decompile executables', 'extract functions, strings, symbols', 'analyze call graphs' — giving comprehensive capability coverage.

5 / 5

Completeness

Clearly states what the skill does, but there is no 'Use when...' clause or equivalent trigger guidance, which caps completeness at 3 per the guidelines.

3 / 5

Trigger Term Quality

Good natural keywords ('reverse engineer', 'decompile', 'binaries', 'call graphs') a user would say, but missing common synonyms and file extensions like 'ELF', '.exe', or 'disassemble'.

4 / 5

Distinctiveness Conflict Risk

A clear niche (Ghidra headless binary analysis) with distinct triggers and minimal overlap with other skills.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
mitsuhiko/agent-stuff
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.