CtrlK
BlogDocsLog inGet started
Tessl Logo

ghidra-reverse

Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.

59

Quality

68%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/ghidra-reverse/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is compact and well-structured with concrete routing and a self-check, but the central workflow leans on checklist-style steps and placeholders rather than copy-paste-ready commands, and the batch path lacks an explicit validation checkpoint.

Suggestions

Replace checkbox-style workflow steps (e.g. "□ 从字符串 / 导入 API 反查") with concrete, runnable Ghidra/analyzeHeadless commands or exact menu paths so guidance is copy-paste ready.

Add an explicit validation checkpoint in the headless batch flow (e.g. verify the decompile export is non-empty and re-run on failure) to lift workflow_clarity above the batch cap of 3.

Tighten redundancy between the ACTION REQUIRED block and the 工作流 section, or clearly label ACTION REQUIRED as routing-only so the two don't restate the same steps.

DimensionReasoningScore

Conciseness

Lean, checkbox- and table-driven body that assumes Claude's competence and avoids explaining what Ghidra is; minor redundancy between the ACTION REQUIRED block and the 工作流 section could be trimmed.

4 / 5

Actionability

Provides one concrete executable command (analyzeHeadless) plus referenced keystrokes, but the core workflow steps are checkbox/pseudocode-like with placeholder paths and the MCP section lacks a concrete command.

3 / 5

Workflow Clarity

A clear sequence exists (NOW/NEXT/ACT plus 工作流 1–4) with a final self-check, but the batch headless flow has no explicit validate-then-proceed checkpoint, so the batch-operation cap of 3 applies.

3 / 5

Progressive Disclosure

Well-organized into clear sections with a real one-level reference (references/ghidra-cheatsheet.md, confirmed present) and clearly signaled sibling-skill pointers; some ../ paths are routing context rather than bundle files.

4 / 5

Total

14

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, trigger-rich, and explicitly positions itself against IDA, answering both what and when concisely. It sits just below top marks because the when-clause and keyword synonym coverage could be slightly more comprehensive.

DimensionReasoningScore

Specificity

Names the domain and several concrete actions — "decompile, cross-refs", "headless or GUI", and "Ghidra MCP workflows" — listing multiple specific actions with only minor coverage gaps.

4 / 5

Completeness

Clearly states what the skill does (Ghidra-based RE with decompile/cross-refs/MCP) and gives a "when" trigger ("Use for free/open reverse engineering... when IDA is unavailable"), though the when-clause could be more explicit.

4 / 5

Trigger Term Quality

Includes natural terms a user would say ("reverse engineering", "Ghidra", "decompile", "when IDA is unavailable") with good coverage; a few synonyms like "disassemble" or "binary analysis" are missing.

4 / 5

Distinctiveness Conflict Risk

Carves a clear Ghidra/open-source niche and explicitly distinguishes from IDA ("when IDA is unavailable"), with only minor overlap risk against sibling skills like radare2 or binary-diff.

4 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.