Binary RE Dynamic Analysis
QEMU/GDB/Frida runbook for tracing and hooking a binary's actual runtime behavior.
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 16, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Jul 16, 2026
⚠ This skill is no longer available upstream. Our re-check on Aug 10, 2026 couldn't find it any more (SKILL.md not found in repo tree). The test below is what we measured on Jul 16, 2026 and we're leaving it up as a record — but there is nothing left to install, so we've removed the command.
Genuinely tried to run its own playbook against a throwaway local ELF/Mach-O target: `brew install qemu` on macOS gives only qemu-system-*, not qemu-user (qemu-arm/qemu-aarch64), exactly matching the skill's own platform table that macOS needs Docker instead — but Docker/Colima wasn't available either. Installed frida-tools and copied its Frida hook example almost verbatim; the exact documented flag `--no-pause` no longer exists on current frida-tools (17.15.5, errors 'unrecognized arguments'), and after adapting the command, both spawn and attach modes hung with no output, consistent with process-injection being blocked in this sandbox. Real, disclosed tooling requirements, not hidden ones, but actually executing any of the five documented options needs infrastructure this environment didn't have.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 5/10
- Docs & honesty 4/5
What Binary RE Dynamic Analysis does
A reference for observing binary runtime behavior via QEMU user-mode syscall tracing, GDB (plus GEF) breakpoint debugging, Frida function hooking, and Docker-based cross-arch emulation on macOS, with a mandatory human-approval gate before any execution, sandbox configs, and anti-anti-debugging guidance. Triggers on run/execute/debug/trace/breakpoint/qemu/gdb/frida/strace requests for an existing binary.
How to install Binary RE Dynamic Analysis
Nothing to install: the source repository no longer has this skill. If the author brings it back, our daily re-check will pick it up and the command will reappear here.
Commands — how to trigger Binary RE Dynamic Analysis
-
/binary-re-dynamic-analysisQEMU/GDB/Frida runbook for tracing and hooking a binary's actual runtime behavior.
It also activates on plain-language prompts like these:
-
Trace this binary's syscalls with QEMU to see what it connects to -
Set a GDB breakpoint and step through this binary's execution -
Hook this function with Frida to see what it actually does
Frequently asked questions
- Is the Binary RE Dynamic Analysis skill free?
- Yes. The skill itself is free from 2389-research/binary-re. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Binary RE Dynamic Analysis work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 16, 2026. Verdict: Works with setup. Genuinely tried to run its own playbook against a throwaway local ELF/Mach-O target: `brew install qemu` on macOS gives only qemu-system-*, not qemu-user (qemu-arm/qemu-aarch64), exactly matching the skill's own platform table that macOS needs Docker instead — but Docker/Colima wasn't available either. Installed frida-tools and copied its Frida hook example almost verbatim; the exact documented flag `--no-pause` no longer exists on current frida-tools (17.15.5, errors 'unrecognized arguments'), and after adapting the command, both spawn and attach modes hung with no output, consistent with process-injection being blocked in this sandbox. Real, disclosed tooling requirements, not hidden ones, but actually executing any of the five documented options needs infrastructure this environment didn't have.
- What is the Binary RE Dynamic Analysis SkillProof Score?
- 7.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 4/5.
- How do I install Binary RE Dynamic Analysis?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Binary RE Dynamic Analysis with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.