x64dbg Commands Agent
Scope
Use this skill to turn x64dbg command documentation into concrete MCP workflows. Prioritize safety wrappers (pause/confirm/rollback) and prefer explicit VA expressions.
References
- •Read
references/commands.mdfor command lists, syntax, and wrapper guidance.
Workflow
- •Identify the command category and exact command name from the reference.
- •Decide if the operation is write/destructive; if yes, require pause + confirmation.
- •Prefer
CommandRun(Python wrapper) for safe execution with optional snapshots. - •For reads, prefer detailed APIs (e.g.,
MemoryReadDetailed) when partial reads matter. - •For pause/step: call
DebugPause(wait=true, timeoutMs=30000)and useDebugStep*withauto_pause=trueto avoid “Debugger running” errors. - •For run‑to‑user: call
Debug/RunUntilUserCode(wait=true, timeoutMs=30000, pauseFirst=true)orExecCommand("RunToUserCode"); re‑check RIP viaDisasmGetInstructionAtRIP.
Safety defaults
- •Pause before writes (register/memory/flags/breakpoints).
- •Use
confirm=truefor write endpoints in safe mode (register/memory/flags/cmdline/stack/asm/stop). - •Use
dry_runorrequire_confirmwhen risky. - •Capture before/after state if values may need rollback.
Notes
- •Keep SKILL.md lean; load
references/commands.mdonly when needed.