What is the ReVa Deep Analysis skill?

It is a specialized capability for Claude Code that enables iterative, deep-dive investigations into binary files via the ReVa Ghidra MCP server.

What is the difference between triage and deep analysis?

Triage provides a broad survey of a binary, while Deep Analysis focuses intensely on a single question or function to provide evidence-backed conclusions.

How does it improve Ghidra databases?

The skill automatically renames variables, adjusts data types, and adds comments based on code patterns and API usage it discovers during analysis.

Does this skill require Ghidra to be installed?

Yes, this skill is designed to work with the ReVa MCP server, which acts as a bridge between Claude and your local Ghidra instance.

Can it identify specific malware behaviors?

Yes, it includes specialized strategies for uncovering cryptographic constants, network communication strings, and obfuscated logic patterns.

ReVa Deep Analysis

Name: ReVa Deep Analysis
Author: cyberkaida

bycyberkaida

•

479

•

Seguridad y Pruebas

Performs intensive, evidence-based reverse engineering investigations within Ghidra to decode complex binary behaviors and logic.

The ReVa Deep Analysis skill empowers Claude to act as a focused reverse engineering investigator within a Ghidra environment. Unlike broad triage, this skill follows a systematic depth-first loop of gathering context, refining the database through renaming and retyping, and following data-flow threads. It is designed to answer specific, high-stakes questions about binary behavior—such as identifying encryption algorithms, extracting C2 addresses, or reconstructing complex data structures—while providing verifiable evidence and maintainable documentation for future analysis.

Características Principales

01Context-aware cross-reference tracing and data-flow analysis

02Iterative depth-first binary investigation and logic analysis

03479 GitHub stars

04Automated Ghidra database cleanup including variable renaming and retyping

05Structured progress tracking using Ghidra bookmarks and analysis notes

06Evidence-based identification of cryptographic patterns and C2 infrastructure

Casos de Uso

01Identifying specific cryptographic algorithms and hardcoded keys within malware

02Deciphering command-and-control (C2) communication protocols and server addresses

03Improving decompilation readability by fixing types and function prototypes

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add cyberkaida/reverse-engineering-assistant deep-analysis

For use in Claude.ai and ChatGPT

Download Skill