agentic-malware-analysis: Agentic malware analysis environment with MCP-connected disassemblers, RE tooling, and structured workflows

by mrphrazer · MCP Server · ★ 312

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

Featured in: AI Reverse Engineering Tools

How to install agentic-malware-analysis

git clone https://github.com/mrphrazer/agentic-malware-analysis.git

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 74/100

Flagged: sudo usage. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

Quick Facts

Stars312
Forks47
LanguageYARA
CategoryMCP Server
LicenseGPL-2.0
Quality Score74/100
Last Updated2026-03-22
Created2026-03-18
Platformsclaude-code, cli, codex, mcp
Est. Tokens~21k

About agentic-malware-analysis

Agentic Malware Analysis Automated deep malware reverse engineering driven by AI agents. A Kali-based Docker environment pairs 50+ RE tools with MCP-connected disassembler backends ([Binary Ninja][binary-ninja-headless-mcp] or [Ghidra][ghidra-headless-mcp]) and a structured multi-phase orchestrator skill that turns a raw binary into a case directory of ranked evidence, validated hypotheses,...

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular YARA Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools