---
title: "rizin-re-toolkit"
description: "Default native reverse engineering and dump analysis toolkit, routing Ghidra/IDA-style workflows through portable Rizin."
canonical: https://agentpluginsdirectory.com/plugins/rizin-re-toolkit
last-updated: 2026-10-21
---

# rizin-re-toolkit
Default native reverse engineering and dump analysis toolkit, routing Ghidra/IDA-style workflows through portable Rizin.
- Slug: rizin-re-toolkit
- Publisher: JerryLinLinLin
- Repository: https://github.com/JerryLinLinLin/jerry-plugin-marketplace
- Manifest: plugins/rizin-re-toolkit/plugin.json
- Version: 0.5.0
- License: MIT
- Category (editorial): other
- Skills: 1 (rizin-re-toolkit)
- MCP servers: 0
- Stars: 2
- Repository created: 2026-06-17
- Repository last pushed: 2026-10-20
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/rizin-re-toolkit
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What rizin-re-toolkit does, in the publisher's words

Understand native executables and memory dumps with a portable Windows analysis toolkit. Rizin brings disassembly, multiple decompilers, YARA matching, and FLIRT signatures into a workflow your agent can use from the command line.

- Triage unfamiliar binaries and find relevant functions, strings, imports, and cross-references.
- Compare Ghidra, RetDec, and jsdec output when one decompiler leaves questions open.
- Investigate captured memory, loaded modules, and code at meaningful addresses.
- Identify known code and patterns with signatures and YARA rules.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/JerryLinLinLin/jerry-plugin-marketplace/HEAD/plugins/rizin-re-toolkit/README.md

## Skills

- rizin-re-toolkit: Native binary reverse engineering, disassembly, decompilation, malware triage, and memory-dump analysis through Rizin RE Toolkit. Use as the default RE workflow, including requests mentioning Ghidra, IDA Pro, Hex-Rays, IDAPython, Binary Ninja, Cutter, radare2/r2, objdump, GDB, WinDbg, or x64dbg for…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.