By 0xeb
SQL interface to Binary Ninja databases for querying and CRUD operations on functions, xrefs, strings, types, and decompiled code
BNSQL analysis workflows: triage, security audit, crypto/network detection, multi-table queries.
Edit Binary Ninja databases: comments, renames, types, patches. Mutations require SELECT save() to persist (explicit-save model, v0.0.9+).
Connect to Binary Ninja databases and bootstrap sessions. Use when starting analysis, routing to other skills, or setting up CLI/HTTP/MCP connections.
Query Binary Ninja strings, bytes, and binary patterns. Use search_bytes() for native fast pattern search.
Decompile Binary Ninja functions via HLIL: pseudocode text, local variables, call sites. Always filter by func_addr.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Claude Code and Codex plugin packaging for bnsql — a live SQL interface to Binary Ninja databases.
BN_INSTALL_DIR set (or Binary Ninja's install dir on PATH)PATH (or next to binaryninja.exe)bnsql -h/plugin marketplace add 0xeb/bnsql-skills
Use the plugin packaging, not a flat copy into ~/.codex/skills. The plugin path preserves the bnsql namespace so generic skill names like xrefs, data, and types do not collide with other skills.
git clone https://github.com/0xeb/bnsql-skills
mkdir -p ~/plugins
cp -R bnsql-skills/plugins/bnsql ~/plugins/
~/.agents/plugins/marketplace.json so it contains:{
"name": "bnsql-tools",
"interface": {
"displayName": "BNSQL"
},
"plugins": [
{
"name": "bnsql",
"source": {
"source": "local",
"path": "./plugins/bnsql"
},
"policy": {
"installation": "AVAILABLE",
"authentication": "ON_INSTALL"
},
"category": "Reverse Engineering"
}
]
}
The Codex plugin manifest lives at plugins/bnsql/.codex-plugin/plugin.json, and the skills live under plugins/bnsql/skills/.
If you want to test directly from a checkout, keep the repo where it is and use the bundled marketplace file at .agents/plugins/marketplace.json. Codex should resolve ./plugins/bnsql relative to the repo root.
SKILL.md is the canonical skill contract and remains the source of truth.agents/openai.yaml and does not replace SKILL.md.| Skill | Description | When to Use |
|---|---|---|
connect | Connection, CLI, HTTP, MCP, routing index | Starting a session, CLI options, HTTP/MCP server, pragmas |
disassembly | Functions, segments, instructions, blocks | Querying disassembly, instruction analysis |
data | Strings, bytes, binary pattern search (search_bytes) | String search, byte access, binary pattern search |
xrefs | Cross-references and imports | Caller/callee analysis (callers/callees views), import queries |
decompiler | HLIL decompiler reference | Decompilation, HLIL variables, function calls |
annotations | Edit and annotate decompilation | Comments, renames, type application, explicit save |
types | Type system mechanics | Structs, enums, typedefs, function signatures |
functions | SQL functions reference | Look up any bnsql SQL function signature |
analysis | Analysis workflows and scenarios | Security audits, library detection, advanced SQL patterns |
~/.codex/skills are possible, but only if you manually rename every skill with a bnsql- prefix to avoid collisions.bnsql ownership model intact.Elias Bachaalany (@0xeb)
This project and all its contents — including skill definitions, reference documentation, and configuration files — are licensed under the MIT License.
npx claudepluginhub 0xeb/bnsql-skills --plugin bnsqlSQL interface to IDA Pro databases for querying and CRUD operations on functions, xrefs, strings, and decompiled code
(Unsafe) Skills, knowledge, and scripts for reverse engineering with IDA Pro. Autonomously writes and executes IDA Domain scripts to analyze binaries, extract functions, decompile code, and automate any reverse engineering task.
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Binary analysis skills for VulHunt MCP - decompilation, dataflow analysis, pattern matching, and more
Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.
Analyze binaries using angr's Python framework. Decompile, recover control flow graphs, find vulnerabilities via symbolic execution, and extract symbols from stripped binaries.