# Binary Ninja Reverse

Use for authorized binary analysis in Binary Ninja, including HLIL/MLIL/LLIL...

- Repository: https://github.com/zhaoxuya520/reverse-skill (43923 stars)
- Category: AI and agents
- License: MIT
- Last updated: 2026-09-22
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add zhaoxuya520/reverse-skill --skill binary-ninja-reverse -g -a claude-code -y`
Codex: `npx skills add zhaoxuya520/reverse-skill --skill binary-ninja-reverse -g -a codex -y`
Cursor: `npx skills add zhaoxuya520/reverse-skill --skill binary-ninja-reverse -g -a cursor -y`
Gemini CLI: `npx skills add zhaoxuya520/reverse-skill --skill binary-ninja-reverse -g -a gemini-cli -y`

## Description

Use for authorized binary analysis in Binary Ninja, including HLIL/MLIL/LLIL inspection, strings/imports/exports, cross-references, types, patch review, Python API automation, and optional Binary Ninja MCP or localhost HTTP integration.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Binary Ninja reverse engineering

Use Binary Ninja when the user explicitly selects it, when its ILs materially help data-flow analysis, or when IDA/Ghidra/radare2 results need an independent cross-check.

## Start safely

1. Confirm the repository case scope is ready before acting on a target.
2. Check `skills/tool-index.md` for `binaryninja`; Binary Ninja is commercial software and must be installed manually with a valid Vector 35 license.
3. Work on a copy when applying patches or saving database changes.
4. Record imports/exports, entry points, architecture, and file hash before promoting findings.

## Choose the integration

- **GUI or Python API:** preferred when Binary Ninja is already open or the user wants direct interactive analysis.
- **Community MCP bridge:** use only when explicitly requested and after reviewing the third-party plugin boundary. Keep the Binary Ninja HTTP listener on `127.0.0.1:9009`; do not enable network exposure by default.
- **Fallback:** use `ghidra-reverse`, `ida-reverse`, or `radare2` when Binary Ninja is unavailable or its license/API cannot open the target.

The reviewed community integration is [`fosdickio/binary_ninja_mcp`](https://github.com/fosdickio/binary_ninja_mcp), GPL-3.0, plugin metadata version `1.1.0`, minimum Binary Ninja build `4000`. The repository is not an official Vector 35 component. This skill was checked against commit `8c5134ee46e2bf44f9a4d846bd971c3e39b3e306` on 2026-09-03.

Install the Binary Ninja side through its Plugin Manager or from the reviewed source. For the MCP stdio bridge, pin the published bridge version rather than using an unbounded package:

```text
npx -y binary-ninja-mcp@1.0.0 --host 127.0.0.1 --port 9009
```

Register that command only in the MCP client the user selected. The bridge is not ready until Binary Ninja is running, a binary is open, and the localhost plugin endpoint responds.

## Analysis workflow

The rest: https://github.com/zhaoxuya520/reverse-skill/blob/HEAD/skills/binary-ninja-reverse/SKILL.md