Skip to main content
Glama

ida_headless_scan

Reanalyze ELF binaries using IDA headless to extract structured JSON results, enabling automated vulnerability scanning and analysis.

Instructions

用 IDA headless 重新分析 ELF,并输出 JSON 扫描结果。

Args: binary_path: 待分析二进制,默认当前仓库 slpd。 out_path: 输出 JSON 路径。 ida_path: idat.exe 路径;为空时自动选 IDA9.3/9.0/7.7。 timeout_sec: IDA 批处理超时。

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
ida_pathNo
out_pathNoresearch/results/ida_slpd_quickscan.json
binary_pathNoslpd
timeout_secNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full disclosure burden. It mentions 're-analyze' (implying idempotent?) and timeouts, but lacks details on whether it modifies any state, required permissions, or potential side effects like overwriting existing data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with a clear one-line purpose and a structured Args list. It is front-loaded and every sentence adds value without repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While an output schema exists, the description doesn't clarify the exact JSON structure or return behavior. Missing details on error handling, IDA availability, and execution mode. For a complex external-process tool, more context would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema titles provide parameter names but no descriptions (0% coverage). The description adds brief explanations and defaults for all four parameters, which is adequate but not detailed. For example, binary_path is described as 'Binary to analyze, default current repo slpd', but no format or constraint info.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool re-analyzes an ELF binary using IDA headless and outputs JSON results. It distinguishes from sibling IDA tools like ida_find_functions and ida_get_pseudocode by focusing on full offline analysis with output to a file.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., other IDA tools). The description only lists parameters without clarifying use cases or prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Aiyakami/PWN-MCP'

If you have feedback or need assistance with the MCP directory API, please join our Discord server