Skip to content

AutoRE-CLI v0.1.1

Choose a tag to compare

@github-actions github-actions released this 16 Aug 19:49
· 15 commits to main since this release

AutoRE-CLI v0.1.1

AutoRE-CLI is a public binary distribution for bounded, evidence-backed static
reverse engineering by human analysts and AI agents.

Highlights

  • Static-only analysis of ELF, PE/COFF, Mach-O, universal Mach-O, object files,
    and explicitly identified raw shellcode.
  • Agent-oriented JSON with budgets, warnings, completion state, evidence
    strength, verified bundles, and exact next actions.
  • Function, CFG, LLIL/MLIL/HLIL/CUSTOM IL, pseudo, call/data reference, PE,
    Go/Rust evidence, protection, archive/replay, and semantic diff surfaces.
  • Offline fail-closed installer and verifier.
  • Agent Skill for bounded, iterative investigation.
  • Five host targets, now including Windows x86-64.

Download

Choose exactly one approximately 7–8 MB platform package:

  • AutoRE-CLI-0.1.1-macos-arm64.tar.gz
  • AutoRE-CLI-0.1.1-macos-x86_64.tar.gz
  • AutoRE-CLI-0.1.1-linux-x86_64.tar.gz
  • AutoRE-CLI-0.1.1-linux-arm64.tar.gz
  • AutoRE-CLI-0.1.1-windows-x86_64.zip

The standalone Agent Skill is available as
AutoRE-CLI-0.1.1-auto-re-skill.zip.

Download SHA256SUMS.release from the same release and verify the archive
before extraction. After extraction, run ./verify.sh on macOS/Linux or:

py -3 scripts/autore_distribution.py verify

on Windows. The internal verifier checks the complete extracted file set,
binary provenance, Skill inventory, public-content boundary, and SHA-256.

Public Repository Boundary

This repository publishes compiled binaries plus the MIT-licensed Agent Skill,
helpers, installer, verifier, release automation, controlled demo source, and
documentation. The Rust engine implementation, private specifications, samples,
and analysis output are not published.

Signing

  • macOS binaries are ad-hoc signed, not Developer ID signed or notarized.
  • Windows x86-64 is not Authenticode signed.
  • Linux artifacts have no platform signing requirement.

Checksums prove consistency with this release; authenticate the release channel
before trusting its checksum file.