skills.rest
wuji66dde
wuji66ddeCOMMUNITY
Explore all skills by this author →
GitHub

jshook-reverse

Analyze obfuscated JavaScript and unpack Webpack bundles via Puppeteer/CDP.

255|42|Updated Feb 11, 2026
Search Tags:#automation#javascript#ai#cdp#puppeteer#deobfuscation#reverse-engineering
One-click install
npx skills add https://github.com/wuji66dde/jshook-skill --skill jshook-reverse
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: jshook-reverse
Source: https://github.com/wuji66dde/jshook-skill/tree/main
Command: npx skills add https://github.com/wuji66dde/jshook-skill --skill jshook-reverse

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AI-powered JavaScript reverse engineering tool for Claude Code. It automates collection, deobfuscation, analysis, and orchestration of workflows to accelerate understanding of complex scripts.

Core Features & Use Cases

  • Collect, search, deobfuscate, understand, summarize, detect-crypto, browser, debugger, breakpoint, debug-step, debug-eval, debug-vars, script, hook, stealth, dom, page capabilities to streamline reverse engineering tasks.
  • Automates code collection from target pages, analyzes obfuscation patterns, detects cryptography, and enables dynamic analysis via browser automation.
  • Use cases include inspecting packed/obfuscated scripts, reproducing encryption logic, and validating security implications in compiled/bundled code.

Quick Start

Run jshook-reverse collect https://example.com to start harvesting JavaScript from the target page.

Frequently Asked Questions about jshook-reverse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deobfuscate JavaScript code and understand obfuscated scripts?▼

Deobfuscating JavaScript involves applying automated analysis to unpack obfuscated scripts and reveal code structure. This process provides stepwise workflows to transform obfuscated code into readable, structured outputs.

Can I use Puppeteer and CDP for dynamic browser-based JavaScript analysis?▼

Yes, Puppeteer and Chrome DevTools Protocol (CDP) enable dynamic browser-based analysis. You can automate page exploration, set breakpoints, debug-step, and evaluate variables directly within React or Vanilla codebases.

What is the best way to collect and harvest JavaScript from a target web page?▼

Collecting JavaScript from target pages is best achieved through automated collection scripts that harvest scripts directly from the URL. This gathers all active scripts for subsequent deobfuscation and security assessment.

Does this JavaScript reverse engineering approach detect cryptography usage in Webpack bundles?▼

Yes, automated analysis can detect crypto usage within unpacked Webpack bundles. It identifies cryptographic functions and patterns to help reproduce encryption logic and validate security implications.

How do I assess security vulnerabilities in compiled or bundled JavaScript?▼

Security assessment of bundled JavaScript involves automated analysis to detect vulnerabilities and evaluate security implications. This yields structured outputs detailing detected vulnerabilities and actionable recommendations.

Related Skills

Explore More Software Engineering Skills→
ytqhytqh

chrome-devtools

Orchestrate Puppeteer CLI scripts to automate browser tasks and extract data.

Community
Advanced
Hashzin-0Hashzin-0

code-reviewer

Review TypeScript code for anti-patterns, security vulnerabilities, and completeness gaps.

Community
Advanced
Codecaine-AICodecaine-AI
1

docs-framework

Generate and maintain structured codebase documentation using a three-layer framework.

Official
Advanced
SuperlendSuperlend

constant-time-testing

Detect timing-based leaks in cryptographic implementations using dudect and Timecop.

Official
Advanced