Connect Hybrid Analysis to Your AI Agent

Provide a hash to find existing reports, inspect processing state, and summarize the available findings.

5 tools API key

Try a Hybrid Analysis Task

Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.

oo Skill Hybrid Analysis

Summarize Existing File Findings

Find reports for a file hash and read available scanner and sandbox findings.

/oo Hybrid Analysis: Search Hybrid Analysis for hash [hash], read the overview for its SHA256 and the state and summary of report [ID]. Separate completed findings from reports still processing.

Start Working with Hybrid Analysis

Install OOMOL

Set up oo CLI and the oo Skill in your agent.
Install OOMOL →
Connect Hybrid Analysis

Connect a Hybrid Analysis API key from your profile’s API Key page.
Connect Hybrid Analysis →
Give Your Agent a Task

Use /oo with the pages to read, the changes to make, and where to save the result.
Connection Guide →

Choose Your Agent

Codex Claude Code Cursor Hermes

A Hybrid Analysis key with access to the reports you want to query.

Hybrid Analysis Tools

Hybrid Analysis exposes hash search, file overviews, sandbox report state, and report summaries. The connection reads existing analyses and does not upload files or start new detonations.

Hash Search and File Overview

Resolve reports associated with a hash and inspect available scanner overview data.

Sandbox Report Status and Summary

Read the processing state and summary of a sandbox report by its identifier.

5 tools

Get Current Key

Get the authorization level for the current Hybrid Analysis API key.

hybrid_analysis.get_current_key

Search Hash

Find Hybrid Analysis detonation reports associated with a file hash.

hybrid_analysis.search_hash

Get Overview

Get the Hybrid Analysis overview for a SHA256 file hash.

hybrid_analysis.get_overview

Get Report State

Get the processing state of a Hybrid Analysis sandbox report.

hybrid_analysis.get_report_state

Get Report Summary

Get the summary of a Hybrid Analysis sandbox report.

hybrid_analysis.get_report_summary

Frequently Asked Questions

Which hash types can I search?

Hash search accepts MD5, SHA1, SHA256, or SHA512. The file overview lookup requires the canonical SHA256.

How do I identify a sandbox report?

Provide the job ID or a report identifier made from the SHA256 and environment ID. Check processing state before interpreting a pending report.

Can I submit a new file for analysis?

These actions query existing files and reports. New file submission and sandbox execution are not exposed.