skill CX Codex

rev-idapython — Claude Code skill: IDAPython and IDALib reference

Q: How do I install rev-idapython in Claude?

Run `npx skills add P4nda0s/reverse-skills --skill rev-idapython -a claude-code`. The skill lands at `~/.claude/skills/rev-idapython/SKILL.md`.

A snippet reference for IDAPython and IDALib: scripts inside IDA and headless analysis for reverse engineering.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add P4nda0s/reverse-skills --skill rev-idapython -a claude-code

Open on GitHub

What rev-idapython does

The skill feeds your agent ready IDAPython snippets. Register reads and writes, debug memory patching, local memory calls that modify the IDB, disassembly helpers, function and basic block traversal, byte pattern search, cross-reference lookups.

Debugging gets its own section. Appcall examples show how to invoke functions in the debuggee, there are helpers for C and C++ strings, a walker for GNU std::map, XMM register reads, and a step-over loop that waits for the next debug event. For headless work the skill covers IDALib, the mode added in IDA 9.0 that runs analysis without the GUI. Handy when you have a pile of binaries and no wish to open each one.

This is a reference, not a runner. It does not analyse anything on its own; it shows the agent what correct code looks like, and the agent writes your script. So test the output against your IDA build — several calls depend on specific modules such as ida_bytes, ida_funcs and ida_idd.

What it helps with

write an IDAPython script that walks functions and basic blocks
read a C or C++ string out of a debuggee's memory
find a byte pattern with a wildcard such as 55 ??
walk a GNU std::map container
batch-analyse binaries headless through IDALib

Example prompts for the agent

write an IDAPython script that lists every function and its basic blocks
help me read a std::string at this address in the IDA debugger
build a headless IDALib script to process a folder of binaries

How to install rev-idapython

1Skills CLI (Vercel)

npx skills add P4nda0s/reverse-skills --skill rev-idapython -a claude-code

2Manually: put the files in place

~/.claude/skills/rev-idapython/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/rev-idapython/

1Skills CLI (Vercel)

npx skills add P4nda0s/reverse-skills --skill rev-idapython -a codex

2Manually: put the files in place

.agents/skills/rev-idapython/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add P4nda0s/reverse-skills --skill rev-idapython -a cursor

2Manually: put the files in place

.cursor/skills/rev-idapython/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install P4nda0s/reverse-skills rev-idapython

2Manually: put the files in place

.github/skills/rev-idapython/SKILL.md

1Skills CLI (Vercel)

npx skills add P4nda0s/reverse-skills --skill rev-idapython -a gemini-cli

2Platform CLI

gemini skills install https://github.com/P4nda0s/reverse-skills --path skills/rev-idapython

Manually: put the files in place

.devin/skills/rev-idapython/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add P4nda0s/reverse-skills --skill rev-idapython -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about rev-idapython

How do I install rev-idapython in Claude?

Run npx skills add P4nda0s/reverse-skills --skill rev-idapython -a claude-code. The skill lands at ~/.claude/skills/rev-idapython/SKILL.md.

What does rev-idapython do?

It gives the agent an IDAPython and IDALib reference: snippets for IDA scripts, debugging, function and block traversal, Hex-Rays work and batch analysis.

How is IDALib different from IDAPython?

IDAPython runs inside the IDA GUI through Script Command, a plugin or the IDC console. IDALib runs analysis without the GUI and arrived in IDA 9.0.

Similar skills

All skills for Security →

ctf-rev cyberkaida Solves CTF reverse engineering challenges by systematically tracing input, identifying transformations, and isolating flag validation paths. CX Codex +1 321installs reverse-engineering-tools gmh5225 A skill for pulling apart game binaries, drivers and dumps: disassembly, decompilation, debugging and interface reconstruction. CX Codex +1 544installs binary-protection-bypass yaklang A skill that walks through ELF binary protections and the bypass for each one. Useful for CTF work and exploit analysis. CX Codex +1 3,700installs reverse-skill-router zhaoxuya520 Routes reverse engineering, security analysis, CTF, and defensive testing tasks through the reverse-skill repository. CX Codex +1 1,500installs leanrea aicodeking Reverse engineers software builds using local CLI tools without MCP. It helps inspect feature logic, extract dependencies, and compare builds. CX Codex +1 1,300installs malware-analysis-dragonflyTomb-avast reason-machines A skill for pulling apart repositories that pose as antivirus installers. It helps you tell a fake distribution from the real thing. CX Codex +1 1,000installs

From the same set7

rev-frida A skill that writes Frida instrumentation scripts for runtime analysis: hooking functions, tracing calls, dumping memory. Useful when reversing Android apps and native libraries. CX Codex +1 2,200installs rev-symbol Recovers function names in decompiled code by analyzing constants, strings, and call relationships. Useful when reverse engineering stripped binaries. CX Codex +1 1,900installs rev-struct Reads memory accesses in decompiled functions and turns them into a struct definition with fields, offsets and a size estimate. CX Codex +1 1,900installs rev-u3d-dump Recovers C# method names and addresses from Unity IL2CPP builds on iOS and Android, then produces import scripts for IDA and Ghidra. CX Codex +1 1,800installs rev-unicorn-debug A reversing skill that runs one function from a binary inside Unicorn, stubbing JNI, syscalls and libc so emulation reaches the return. CX Codex +1 1,800installs rev-dex-dumper Dumps DEX files directly from an Android application's process memory via ADB. It helps unpack APK files and defeat dynamic class loaders. CX Codex +1 1,800installs