ast-deobfuscate

Deobfuscate JavaScript code using a Babel-based AST transformation pipeline.

402|63|Updated Feb 5, 2026

Search Tags:#javascript #static-analysis #ast #deobfuscate #reverse-engineering #babel

Ready to run

npx skills add https://github.com/zhizhuodemao/ai-reverse-toolkit --skill ast-deobfuscate

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ast-deobfuscate
Source: https://github.com/zhizhuodemao/ai-reverse-toolkit/tree/main/skills/ast-deobfuscate
Command: npx skills add https://github.com/zhizhuodemao/ai-reverse-toolkit --skill ast-deobfuscate

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables generic JavaScript AST-based deobfuscation to maximize readability and recover original logic from obfuscated code.

Core Features & Use Cases

AST-based deobfuscation pipeline: parse, traverse, and regenerate readable code from heavily obfuscated JavaScript using Babel's parser, traverse, generator, and types.
Stepwise, safe workflow: supports a multi-step plan (string decryption, expression simplification, proxy inlining, property dictionary inline, control-flow unflattening, dead code removal) with intermediate artifacts for recovery and rollback.
Real-world scenarios: reverse engineer minified or obfuscated web/mobile JS to understand behavior, audit security, or recover source logic for debugging.

Quick Start

Run the AST-based deobfuscation workflow on the target JavaScript project to progressively restore readable code.

Frequently Asked Questions about ast-deobfuscate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I deobfuscate JavaScript code using AST analysis?▼

JavaScript deobfuscation applies a Babel-based AST workflow to parse, traverse, and regenerate readable code from heavily obfuscated scripts across web and mobile applications.

What is the best way to reverse engineer minified JavaScript with string encryption?▼

Reverse engineering minified JavaScript uses stepwise AST transformations like string decryption, proxy inlining, and control-flow unflattening to safely recover original source logic for debugging.

Can I use Babel to unflatten control flow in obfuscated web scripts?▼

Yes, Babel's parser, traverse, and generator tools support control-flow unflattening and dead code removal to restore readability from heavily obfuscated web and mobile JavaScript scripts.

Does AST-based deobfuscation support incremental transformations and rollback?▼

AST deobfuscation supports a safe, multi-step workflow that generates intermediate artifacts during transformations like expression simplification and property dictionary inlining for recovery and rollback.

What static analysis steps are needed to extract original logic from obfuscated JavaScript?▼

Static analysis requires parsing obfuscated JavaScript into an AST, then applying stepwise transformations including string decryption, proxy inlining, and dead code removal to extract original logic.

Why use Babel AST transformations instead of other static analysis methods for deobfuscation?▼

Babel AST transformations provide stepwise, safe deobfuscation through targeted node traversal and regeneration, offering precise control-flow unflattening and string decryption over generic static analysis.