How does confidence calibration work in the reports?

It uses a standardized scale (High, Medium, Low, Speculative) based on whether findings are supported by multiple independent sources or limited evidence.

Can this skill identify specific binary capabilities?

Yes, it maps observed functions and syscalls to specific capabilities such as network communication, file system access, and cryptographic operations.

What is the purpose of the Binary Analysis Synthesis skill?

It is a specialized tool for Claude Code designed to compile, correlate, and document findings from binary reverse engineering tasks into structured, actionable reports.

How does it handle hypothesis testing during analysis?

The skill categorizes hypotheses based on the strength of supporting or contradicting evidence into states like Confirmed, Uncertain, Refuted, or Unvalidated.

What formats can the reports be exported in?

It supports human-readable Markdown for documentation, structured JSON for tool integration, and STIX/TAXII formats for threat intelligence sharing.

Binary Analysis Synthesis

Name: Binary Analysis Synthesis
Author: 2389-research

by2389-research

•

セキュリティとテスト

Compiles gathered facts and validated hypotheses into structured binary analysis reports and actionable intelligence.

The Binary Analysis Synthesis skill streamlines the final phase of reverse engineering by correlating evidence from triage, static, and dynamic analysis into professional documentation. It helps analysts validate hypotheses against gathered facts, map binary capabilities across network, file system, and cryptographic domains, and generate comprehensive reports. By standardizing the evidence chain and implementing confidence-level calibration, it ensures that reverse engineering findings are traceable, objective, and ready for stakeholders or archival.

主な機能

01Correlates findings across triage, static, and dynamic analysis phases

028 GitHub stars

03Generates structured behavioral summaries and capability maps

04Validates hypotheses with explicit evidence status and confidence levels

05Produces professional reports in Markdown, JSON, and STIX/TAXII formats

06Maintains a knowledge journal for long-term episodic memory of analysis

ユースケース

01Documenting malware behavior and IOCs for threat intelligence sharing

02Generating traceable evidence chains for archival of reverse engineering projects

03Creating executive summaries for security audits and vulnerability assessments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add 2389-research/claude-plugins synthesis

For use in Claude.ai and ChatGPT

Download Skill