{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/docs/getting-started.md",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/docs/index.md",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/docs/tabs/settings-tab.md",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/docs/tabs/symgraph-tab.md",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/docs/tabs/query-tab.md",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/ida-plugin.json",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/requirements.txt",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/src/services/models/provider_types.py",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/src/services/tool_approval_service.py",
    "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/LICENSE",
    "https://github.com/symgraph/IDAssist/releases/tag/2.3.0",
    "https://github.com/symgraph/IDAssist/releases/tag/2.4.0",
    "https://github.com/symgraph/GhidrAssist/blob/798a5d708124535aeb2ad8b7580ee08cfd14171b/README.md"
  ],
  "category": "agent-workflows",
  "description_en": "IDA Pro plugin by Jason Tang, who also wrote GhidrAssist, that adds a dockable PySide6 panel for LLM-assisted analysis of the open database. Its tabs explain decompiled or disassembled functions with a security summary, keep persistent chats with context macros and an optional ReAct agent mode, propose function, variable and type renames for review before they are applied, and build a semantic knowledge graph of functions, calls, data flows and security traits, with retrieval over reference documents the analyst adds. Models can call built-in IDA tools or external MCP servers, and a SymGraph tab imports and publishes names, types and graph data through the hosted symgraph.ai service.",
  "description_zh": "由 GhidrAssist 作者 Jason Tang 开发的 IDA Pro 插件，提供一个可停靠的 PySide6 面板，借助大语言模型分析当前打开的数据库。各标签页可解释反编译或反汇编后的函数并附安全摘要，保存带上下文宏和可选 ReAct 智能体模式的持久对话，为函数、变量和类型提出重命名建议并在审阅后应用，还能构建涵盖函数、调用、数据流和安全特征的语义知识图谱，并检索分析人员添加的参考文档。模型可以调用内置的 IDA 工具或外部 MCP 服务器；SymGraph 标签页则通过托管的 symgraph.ai 服务导入和发布名称、类型及图谱数据。",
  "entry_url": "https://awesomerea.org/resources/idassist/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/idassist/",
  "evidence_url": "https://github.com/symgraph/IDAssist/blob/09dd910d70016c7b3f7e8bc01a4d5bc1035ec302/README.md",
  "group": "agents",
  "id": "idassist",
  "json_url": "https://awesomerea.org/resources/idassist/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/idassist/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/idassist/index.md",
  "name": "IDAssist",
  "name_zh": "IDAssist IDA Pro 大模型辅助分析插件",
  "record_type": "resource",
  "relationship": "independent-agent-integration",
  "requirements": [
    "Latest release at review: 2.4.0, published 2026-09-14 as a source-only GitHub release; the reviewed master commit is one commit later and only updates model guidance. The README and getting-started guide require IDA Pro 9.0+ with its bundled Python 3.11+ and PySide6, while ida-plugin.json lists IDA 9.1–9.4, and the 2.3.0 notes report fixes for IDA 9.3 and 9.4 on Windows with Python 3.14. Hex-Rays is recommended for pseudocode, with disassembly used otherwise. It installs with Hex-Rays' hcli plugin manager, or from a release archive in the IDA plugins directory with requirements.txt installed into IDA's Python; that file adds boto3 for Bedrock, which the manifest's dependency list omits.",
    "Analysis needs at least one configured LLM provider. The reviewed provider types cover Anthropic, OpenAI, Gemini and xAI API keys, OpenAI and Gemini subscription sign-in through OAuth, the local Claude Code CLI, AWS Bedrock, a LiteLLM proxy, and local Ollama, LM Studio or Open WebUI endpoints; the README's table also lists an Anthropic OAuth type that the source does not define. Explanations, chats and agent runs send pseudocode or disassembly to the active provider, so only a local or self-hosted endpoint keeps code on the machine. The documentation says chats, graphs, settings and feedback are kept in local SQLite databases in the .idapro/idassist folder of the user's home directory, with API keys encrypted in the settings database.",
    "Programs come from the user's own IDA databases. Rename suggestions show confidence scores and are written to the IDB only for the rows the user selects. During a chat, built-in tools and external MCP servers, reached by URL over SSE or streamable HTTP or launched over stdio, can read and modify the IDB; in the Query tab, calls to tools whose names do not look read-only wait for an allow-once, allow-for-session or deny decision unless the chat accepts all tools, and this classification relies on tool-name keywords.",
    "The SymGraph tab looks up the input binary by SHA-256 without a key, but importing, publishing and uploading need a SymGraph API key, and publishing uploads the raw binary itself when the service does not already hold it. The repository has no tests or CI workflows. MIT, per LICENSE and ida-plugin.json; IDA Pro, the Hex-Rays decompiler, model providers and SymGraph keep their own terms."
  ],
  "requirements_zh": [
    "审阅时最新版本为 2.4.0，于 2026-09-14 以仅含源码的 GitHub 发布形式推出；所审阅的 master 提交比它晚一个提交，只更新了模型选择建议。README 和入门指南要求 IDA Pro 9.0+ 及其自带的 Python 3.11+ 和 PySide6，而 ida-plugin.json 列出的是 IDA 9.1–9.4；2.3.0 的发布说明称修复了 Windows 上 IDA 9.3、9.4 搭配 Python 3.14 时的问题。建议配备 Hex-Rays 以使用伪代码，否则改用反汇编。可通过 Hex-Rays 的 hcli 插件管理器安装，也可把发布压缩包解压到 IDA 插件目录，再把 requirements.txt 中的依赖装入 IDA 的 Python 环境；该文件额外列出供 Bedrock 使用的 boto3，而插件清单的依赖列表没有包含它。",
    "分析前至少需要配置一个大模型提供方。所审阅的提供方类型包括 Anthropic、OpenAI、Gemini 和 xAI 的 API 密钥，通过 OAuth 登录的 OpenAI 和 Gemini 订阅账号，本地的 Claude Code CLI，AWS Bedrock，LiteLLM 代理，以及本地的 Ollama、LM Studio 或 Open WebUI 端点；README 的表格还列出一种 Anthropic OAuth 类型，但源码中并未定义。函数解释、对话和智能体运行都会把伪代码或反汇编发送给当前提供方，只有使用本地或自托管端点时代码才不会离开本机。文档称对话、图谱、设置和反馈保存在用户主目录下 .idapro/idassist 文件夹中的本地 SQLite 数据库里，API 密钥在设置数据库中加密存储。",
    "分析对象来自使用者自己的 IDA 数据库。重命名建议附带置信度评分，只有使用者选中的条目才会写入 IDB。对话过程中，内置工具和外部 MCP 服务器（通过 URL 以 SSE 或 streamable HTTP 连接，或以 stdio 方式启动）都可以读取和修改 IDB；在 Query 标签页中，名称看起来不属于只读操作的工具调用需要使用者选择允许一次、本会话内允许或拒绝，除非该对话开启了接受所有工具，而这种分类只依据工具名称中的关键词。",
    "SymGraph 标签页无需密钥即可按 SHA-256 查询输入的二进制文件，但导入、发布和上传都需要 SymGraph API 密钥；若服务端尚无该文件，发布时会把原始二进制文件本身一并上传。仓库没有测试或 CI 工作流。依据 LICENSE 和 ida-plugin.json 采用 MIT 许可；IDA Pro、Hex-Rays 反编译器、各模型提供方和 SymGraph 各自适用其条款。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/symgraph/IDAssist",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}