CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

idapython

IDA Pro Python scripting for reverse engineering. Use when writing IDAPython scripts, analyzing binaries, working with IDA's API for disassembly, decompilation (Hex-Rays), type systems, cross-references, functions, segments, or any IDA database manipulation. Covers ida_* modules (50+), idautils iterators, and common patterns.

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exceptionally lean and actionable reference: the module router plus terse executable patterns respect the context budget and cover common IDAPython tasks well. The main defects are missing validation guidance around destructive operations (patch_bytes) and a Detailed API Reference section pointing to files that are absent from the bundle.

Suggestions

Include the actual docs/<module>.md files in the bundle (or remove/fix the 'Detailed API Reference' section), since every reference in that section currently points to nonexistent files.

Add a brief validation checkpoint for destructive operations, e.g., read back bytes with ida_bytes.get_bytes() after patch_bytes() to verify the patch applied as intended.

Deduplicate the manual-hex-conversion rule, which appears both in 'Critical Rules' and the 'Anti-Patterns' table.

DimensionReasoningScore

Conciseness

Lean and efficient: a module router table plus terse code patterns with zero explanation of concepts Claude already knows (no "what is IDA" padding). Only one line of duplication between Critical Rules and Anti-Patterns (manual hex conversion), which is negligible.

5 / 5

Actionability

Fully executable copy-paste-ready snippets (idautils.Functions() iteration, decode_insn, ctree visitor, tinfo_t/udt construction, patch_bytes) with concrete module routing, constants, and do/don't tables covering the common reverse-engineering tasks.

5 / 5

Workflow Clarity

Not a sequenced multi-step skill, but key checkpoints exist ("Call ida_auto.auto_wait() before reading results", main-thread/thread-safety rules). However, destructive operations like patch_bytes carry no validation or undo checkpoint, so it falls short of a 5.

4 / 5

Progressive Disclosure

The body defers bulk API documentation to docs/<module>.md and docs/<module>.rst with clear one-level-deep signaling, but no docs/ directory (or any references/, scripts/, assets/) exists in the bundle — every deep reference is dangling, so navigation breaks in practice.

3 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that clearly and explicitly states both capability and trigger conditions in third person with dense, concrete coverage of the IDA domain. The only gap is a few natural user-facing trigger terms (file extensions like .idb/.i64, patching/renaming vocabulary).

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions — "writing IDAPython scripts, analyzing binaries, working with IDA's API for disassembly, decompilation (Hex-Rays), type systems, cross-references, functions, segments" — with comprehensive domain coverage in third-person voice.

5 / 5

Completeness

Explicitly answers both what ("IDA Pro Python scripting for reverse engineering... Covers ida_* modules (50+), idautils iterators") and when ("Use when writing IDAPython scripts, analyzing binaries, working with IDA's API for...") with concrete trigger phrases.

5 / 5

Trigger Term Quality

Good coverage of natural user terms ("IDAPython scripts", "analyzing binaries", "disassembly", "decompilation (Hex-Rays)", "cross-references") including synonyms, but a few natural phrases are missing (e.g., ".idb/.i64 database files", "patching binaries", "renaming functions").

4 / 5

Distinctiveness Conflict Risk

Clear niche: IDA Pro/IDAPython is highly specific and distinct from generic Python or other reverse-engineering skills; only trivial overlap risk with plain Python scripting requests.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

mrexodia/ida-pro-mcp

Path

skills/idapython/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.