jsreverser-mcp-playbook

Guides MCP-based JavaScript reverse engineering through observation, hooking, and Node environment rebuilding.

994|190|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/NoOne-hub/JSReverser-MCP --skill jsreverser-mcp-playbook
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: jsreverser-mcp-playbook
Source: https://github.com/NoOne-hub/JSReverser-MCP/tree/main/skills/jsreverser-mcp-playbook
Command: npx skills add https://github.com/NoOne-hub/JSReverser-MCP --skill jsreverser-mcp-playbook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Reverse-engineering front-end JavaScript signature parameters (like h5st, a-bogus, falcon) is usually ad-hoc and error-prone. This Skill standardizes the entire workflow—page observation, runtime hook sampling, local Node reproduction, environment patching, and deobfuscation—so every step produces traceable evidence artifacts instead of guesswork.

Core Features & Use Cases

  • Five-Stage Workflow: Enforces an Observe → Capture → Rebuild → Patch → DeepDive pipeline with explicit rules like observe-first, hook-preferred, and breakpoint-last.
  • Task-Driven Tool Routing: Directs the AI to the right MCP tools (start_reverse_task, orchestrate_reverse_task, run_reverse_agent, export_portable_bundle) based on user intent, with a structured response-reading protocol.
  • Environment Patching Discipline: Drives Node environment patching via proxy env logs, first-divergence tracking, and minimal causal-unit patches rather than blind browser simulation.
  • Use Case: When asked to reproduce a site's request signature in Node, the Skill first locates the target request and script in the browser, hooks fetch/xhr for runtime samples, exports a rebuild bundle, then iteratively patches the environment until the signature verifies.

Quick Start

Use the jsreverser-mcp-playbook to reverse the signature parameter of the target site's API, starting a new reverse task and following the observe-first workflow.

Frequently Asked Questions about jsreverser-mcp-playbook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I reverse engineer a JavaScript signature parameter with MCP?

Start a reverse task with start_reverse_task, observe the page to locate the target request and script, hook fetch/xhr to capture runtime samples, then export a rebuild bundle and patch the Node environment iteratively until the signature verifies.

What is the correct order for JS reverse engineering workflow?

Follow the five stages: Observe, Capture, Rebuild, Patch, DeepDive. Page observation always comes before local environment rebuilding, and hooking is preferred over breakpoints, which are a last resort.

How does environment patching work in Node for signature reproduction?

Read the proxy env log first, record the current first divergence, then apply one minimal causal-unit patch at a time such as a value, function shell, or minimal object contract. Retest after each patch and confirm the divergence moves forward.

When should I use breakpoints instead of hooks in browser debugging?

Breakpoints are the last resort, used only when hooks cannot explain the critical context. The default approach is minimal fetch/xhr hook sampling, with preload script injection for first-screen initialization logic.

What should I do when local environment rebuilding stops making progress?

If two consecutive rebuild rounds show no progress, return to page observation and record additional runtime evidence before continuing. Never guess environment values without proxy logs and first-divergence records.