SuperAPI AI Directory
Partner with us中文AI newsFavorites
Skillsghidra-headless-frida-runtime-injection

ghidra-headless-frida-runtime-injection

Security & auditing

View repository

Updated 10-15 20:10

About this skill

Ghidra Headless Frida Runtime Injection

Use this phase skill when planning must support bounded Frida runtime capture without weakening the repository's headless-only and Markdown-first contract.

The canonical contract is ./planning-brief.md. Use it to shape planning outputs, select reusable common Frida scripts, and audit generated artifacts for missing capture-manifest or handoff requirements.

Phase Focus

This phase covers:

  • reproducible CLI/headless Frida runtime capture
  • selection of tracked reusable common Frida scripts
  • capture-manifest generation and runtime artifact references
  • explicit audit gates before evidence import can begin

Supported Runtime Evidence Scenarios

The first-release common script library supports all five first-class runtime evidence scenarios:

  • function signature analysis
  • decompilation-to-original comparison
  • runtime call-tree tracing
  • dynamic dispatch or vtable observation
  • hot-path or coverage observation

Non-Negotiable Constraints

  • CLI/headless only. GUI-driven capture is out of scope.
  • Open-ended interactive exploration is out of scope.
  • Runtime artifacts stay under .work/ghidra-artifacts/ and are referenced explicitly rather than copied into tracked skill directories.
  • Generated planning artifacts must keep selected scripts, capture commands, produced artifacts, and audit gates visible in Markdown.
  • Reusable script-library coverage gaps, behavior changes, or helper changes route to ../ghidra-headless-script-review/SKILL.md.
  • Successful runtime capture hands off to ../ghidra-headless-frida-evidence/SKILL.md.
  • No downstream speckit extension or constitution change is required.

Required Inputs

  • normalized target identity and scope
  • requested runtime evidence scenario
  • reusable script selection or coverage-gap decision
  • reproducible CLI/headless command shape
  • expected runtime artifacts and capture-manifest fields
  • audit gates required before evidence import can proceed
  • optional stricter local rule overlays

Common Script Selection Workflow

  1. Start in ./frida-scripts/manifest.md to match the request to one of the five supported scenarios.
  2. Confirm the invocation shape, expected outputs, and coverage notes for the candidate script in ./frida-scripts/README.md.
  3. Record the selected script identifier or identifiers in the capture manifest.
  4. If no script covers the request, or if behavior/output expectations change, stop and route the change through script review.

Required Outputs

  • a capture plan that stays reproducible through CLI/headless invocation
  • a runtime capture manifest using ./templates/frida-capture-manifest.md
  • explicit artifact references under .work/ghidra-artifacts/
  • a handoff to the Frida evidence-import phase with audit-gate results visible

How To Use This Skill

  1. Fill in ./planning-brief.md with the target, scenario, selected reusable script, command shape, and audit gates.
  2. Confirm the matching script and coverage notes in ./frida-scripts/manifest.md.
  3. Use the same brief to audit generated spec.md, plan.md, and tasks.md.
  4. If the generated artifacts weaken CLI/headless capture, hide runtime outputs, or skip the evidence-import handoff, refine or regenerate the planning artifacts instead of weakening this contract.

Examples

Next Step Routing

  • Use this phase after intake when Frida runtime capture still needs to be planned and executed through a reusable, reviewable script path.
  • Move to ../ghidra-headless-frida-evidence/SKILL.md once capture artifacts and the capture manifest are ready for import and adjudication.
  • Move to ../ghidra-headless-script-review/SKILL.md when the request needs new reusable script coverage, changed behavior, or a reusable helper that alters manifest-generation or normalization behavior.