skills: expand Ghidra and Hopper workflows

[gaelic-ghost]

Summary\n- add direct Ghidra headless and PyGhidra guidance\n- add Hopper Python SDK and safe local MCP workflow skills\n- export the portable skill set to Hermes and document the external-profile boundary\n\n## Verification\n- uv run pytest\n- uv run mypy\n- uv run scripts/validate_socket_metadata.py\n- uv run scripts/validate_hermes_compatibility.py

Summary by CodeRabbit

• New Features

  • Added reverse-engineering skills for Ghidra and Hopper, including interactive analysis, headless/Python automation, and evidence preservation.
  • Added guided workflows for connecting Hopper’s local MCP service with read-first controls and explicit approval for changes.
  • Included these skills in Hermes exports and the skills catalog.

• Documentation

  • Expanded compatibility guidance, tool boundaries, checkpoints, and safe configuration practices.

• Bug Fixes

  • Improved validation for skill metadata and Hermes compatibility.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: bff70c69-7b54-4436-9ebd-43e4d06dcc58

📥 Commits

Reviewing files that changed from the base of the PR and between d798326 and d4ec8a8.

📒 Files selected for processing (29)

• ROADMAP.md
• docs/maintainers/hermes-compatibility.md
• docs/maintainers/reverse-engineering-skills-plugin-plan.md
• plugins/reverse-engineering-skills/scripts/validate_repo_metadata.py
• plugins/reverse-engineering-skills/skills/connect-hopper-mcp/SKILL.md
• plugins/reverse-engineering-skills/skills/connect-hopper-mcp/agents/openai.yaml
• plugins/reverse-engineering-skills/skills/connect-hopper-mcp/references/hopper-mcp-profile.md
• plugins/reverse-engineering-skills/skills/script-hopper-analysis/SKILL.md
• plugins/reverse-engineering-skills/skills/script-hopper-analysis/agents/openai.yaml
• plugins/reverse-engineering-skills/skills/script-hopper-analysis/references/hopper-automation-and-mcp.md
• plugins/reverse-engineering-skills/skills/use-ghidra/SKILL.md
• plugins/reverse-engineering-skills/skills/use-ghidra/references/ghidra-workflow.md
• plugins/reverse-engineering-skills/skills/use-hopper/SKILL.md
• plugins/reverse-engineering-skills/skills/use-hopper/references/hopper-workflow.md
• scripts/export_hermes_skills.py
• skills.sh.json
• skills/connect-hopper-mcp/SKILL.md
• skills/connect-hopper-mcp/agents/openai.yaml
• skills/connect-hopper-mcp/references/hopper-mcp-profile.md
• skills/script-hopper-analysis/SKILL.md
• skills/script-hopper-analysis/agents/openai.yaml
• skills/script-hopper-analysis/references/hopper-automation-and-mcp.md
• skills/use-ghidra/SKILL.md
• skills/use-ghidra/agents/openai.yaml
• skills/use-ghidra/references/ghidra-workflow.md
• skills/use-hopper/SKILL.md
• skills/use-hopper/agents/openai.yaml
• skills/use-hopper/references/hopper-workflow.md
• tests/test_validate_hermes_compatibility.py

---

📝 Walkthrough

Walkthrough

Adds Ghidra and Hopper reverse-engineering skills, including Hopper Python SDK and local MCP workflows. Extends metadata validation, Hermes export wiring, skill groupings, compatibility guidance, maintainer plans, and roadmap tracking.

Changes

Reverse-engineering skill expansion

Layer / File(s)	Summary
Metadata validation and Hermes export wiring plugins/reverse-engineering-skills/scripts/..., scripts/export_hermes_skills.py, skills.sh.json, docs/maintainers/hermes-compatibility.md, tests/test_validate_hermes_compatibility.py	Skill metadata now supports validated Hermes categorization and reverse-engineering skills are included in Hermes exports and compatibility tests.
Ghidra analysis workflow skills/use-ghidra/..., plugins/reverse-engineering-skills/skills/use-ghidra/...	Ghidra guidance covers CodeBrowser, headless analysis, PyGhidra, project state, evidence capture, and output attribution.
Interactive Hopper document skill skills/use-hopper/..., plugins/reverse-engineering-skills/skills/use-hopper/...	Hopper’s interactive document workflow is separated from scripted and MCP-driven operations.
Hopper Python SDK automation skills/script-hopper-analysis/..., plugins/reverse-engineering-skills/skills/script-hopper-analysis/...	Adds checkpointed, explicitly scoped Hopper SDK analysis with mutation modes, verification, and evidence retention.
Operator-local Hopper MCP connection skills/connect-hopper-mcp/..., plugins/reverse-engineering-skills/skills/connect-hopper-mcp/...	Adds private MCP configuration, read/navigation allowlisting, disclosure gating, calibration, and controlled mutation escalation.
Reverse-engineering delivery plan ROADMAP.md, docs/maintainers/reverse-engineering-skills-plugin-plan.md	Records the completed Ghidra/Hopper expansion and its Hermes-compatible skill-tap delivery structure.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Operator
  participant CodexHermes
  participant HopperMCPServer
  participant Hopper
  Operator->>CodexHermes: Select local Hopper MCP profile
  CodexHermes->>HopperMCPServer: Start stdio connection
  HopperMCPServer->>Hopper: Run approved discovery or navigation query
  Hopper-->>CodexHermes: Return targeted evidence

Loading

Possibly related PRs

• gaelic-ghost/socket#142: Introduced the Hermes skill-tap export and validation pipeline extended here.
• gaelic-ghost/socket#144: Added the reverse-engineering metadata validator extended by this PR.

Suggested labels: enhancement

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: expanding Ghidra and Hopper workflow skills.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch skills/ghidra-hopper-integration

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}