Skip to main content
Glama

r2_list_strings

List strings in binary files for reverse engineering. Filter by minimum length to improve analysis performance.

Instructions

[Binary/reverse-engineering tool. Use when: disassembly, radare2, r2, debugging, vulnerability research, ELF/PE/SO/DEX analysis.] 【r2ai逆向工具】📝 [逆向第一步] 列出二进制文件中的字符串。通过配置 bin.str.min 进行底层过滤,提高大文件分析性能。 【 触发场景】当用户询问二进制逆向分析、反汇编、漏洞挖掘、radare2命令执行、调试相关问题时,必须优先调用此工具。 【使用规则】调用前必须确认用户提供了目标文件的绝对路径,禁止捏造不存在的文件路径或命令结果,session_id 不再使用时必须关闭。

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeNo搜索模式: 'data' (iz) 或 'all' (izz)data
min_lengthNo最小字符串长度(默认 5,在 R2 核心层过滤)
session_idYes会话 ID

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.0.3

TDQS

B3.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and uses it well: it discloses a non-mutating listing operation, explains R2-core filtering via bin.str.min for large-file performance, and mandates an existing absolute path while prohibiting fabricating paths or command results. It also exposes the session lifecycle by stating that session_id must be closed when no longer used. Return format and pagination are not covered, but the key behavioral traits are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose sentence and performance note are useful and front-loaded. However, the opening English 'Use when' list and the Chinese trigger-scenario section repeat the same overbroad guidance, and the 'must prioritize' instruction adds noise without supporting correct selection. The description is compact but not every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple 3-parameter tool with no output schema and no annotations, the description covers purpose, the absolute-path prerequisite, and session cleanup. But it overstates applicability to disassembly/debugging, does not describe the shape or limits of the returned string list, and does not route the agent to sibling tools for other analysis types. Tightening the use-when and naming alternatives would make it more complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema covers all three parameters—mode, min_length, and session_id—with descriptions, so the baseline is 3. The description's mention of bin.str.min essentially restates the schema's 'R2 核心层过滤' for min_length and adds no new syntax or constraints. No parameter-specific examples or additional semantics are provided beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the operation—'列出二进制文件中的字符串' (list strings in a binary)—and frames it as the first reverse-engineering step, making the verb and resource specific. It does not explicitly contrast with siblings like r2_list_functions, and the opening 'Use when: disassembly...' list overbroadens the scope, so it stops just short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit trigger rules: when users ask about binary reverse engineering, disassembly, vulnerability research, radare2 command execution, or debugging, it must be called first. This is misleading because listing strings is not the correct default for those tasks, and no alternatives such as r2_disassemble or r2_list_functions are mentioned. Actively steering the agent to the wrong sibling is worse than providing no guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.