idasql-skills
July 17, 2026 · View on GitHub
Claude Code / Copilot CLI and Codex plugin packaging for idasql — a live SQL interface to IDA Pro databases.
Prerequisites
- IDA Pro installed with IDA's directory in your PATH
- idasql from Releases placed next to IDA
- Verify:
idasql -h
Installation
Claude Code / Copilot CLI
/plugin marketplace add allthingsida/idasql-skills
Codex
Use the plugin packaging, not a flat copy into ~/.codex/skills. The plugin path preserves the idasql namespace so generic skill names like xrefs, data, and types do not collide with other skills.
Home-local install
- Clone this repo anywhere temporary:
git clone https://github.com/allthingsida/idasql-skills
- Copy the plugin directory into your home plugins folder:
mkdir -p ~/plugins
cp -R idasql-skills/plugins/idasql ~/plugins/
- Create or update
~/.agents/plugins/marketplace.jsonso it contains:
{
"name": "allthingsida",
"interface": {
"displayName": "All Things IDA"
},
"plugins": [
{
"name": "idasql",
"source": {
"source": "local",
"path": "./plugins/idasql"
},
"policy": {
"installation": "AVAILABLE",
"authentication": "ON_INSTALL"
},
"category": "Reverse Engineering"
}
]
}
- Restart Codex.
The Codex plugin manifest lives at plugins/idasql/.codex-plugin/plugin.json, and the skills live under plugins/idasql/skills/.
Repo-local install
If you want to test directly from a checkout, keep the repo where it is and use the bundled marketplace file at .agents/plugins/marketplace.json. Codex should resolve ./plugins/idasql relative to the repo root.
Compatibility
SKILL.mdis the canonical skill contract and remains the source of truth.- Per-skill Codex UI metadata lives in each skill's optional
agents/openai.yamland does not replaceSKILL.md. - Codex plugin packaging lives alongside the Claude packaging so this repo can support both without renaming the underlying skills.
Skills
| Skill | Description | When to Use |
|---|---|---|
connect | Connection, CLI, HTTP, UI context, routing index | Starting a session, CLI options, HTTP server, pragmas |
ui-context | Live IDA GUI state capture | What's on screen, current selection/view, active widget |
disassembly | Functions, segments, instructions, blocks | Querying disassembly, instruction analysis, file generation |
data | Strings, bytes, string cross-references | String search, byte access, binary pattern search |
grep | Named entity search | Find functions, labels, types, and members by pattern |
xrefs | Cross-references and imports | Caller/callee analysis, import queries, reference graphs |
decompiler | Full decompiler reference | Decompilation, ctree AST, local variables, union selection |
annotations | Edit and annotate decompilation | Comments, renames, type application, enum/struct editing |
types | Type system mechanics | Structs, unions, enums, parse_decls, type classification |
debugger | Breakpoints and byte patching | Breakpoint CRUD, byte patching, patch inventory |
storage | Persistent key-value storage (netnode) | Store/retrieve data inside the IDB |
idapython | Python execution via SQL | Execute IDAPython snippets and files |
functions | SQL functions reference | Look up any idasql SQL function signature |
analysis | Analysis workflows and scenarios | Security audits, library detection, advanced SQL patterns |
re-source | Recursive source recovery methodology | Decompilation cleanup, structure recovery, annotation workflows |
Notes
- The supported Codex path is plugin-based installation. Flat installs into
~/.codex/skillsare possible, but only if you manually rename every skill with anidasql-prefix to avoid collisions. - The plugin-based layout keeps the repo’s natural
idasqlownership model intact.
Links
Author
Elias Bachaalany (@0xeb)
License
This project and all its contents — including skill definitions, reference documentation, and configuration files — are licensed under the Human-Origin Source License v1.0.