web-js-env-patcher
web-js-env-patcher is a JavaScript & TypeScript skill for AI agents, published by lwjjike in the xbsReverseSkill repository on GitHub. Skillspace rates web-js-env-patcher D (64/100) and it passed the safety scan; the rating is based on static analysis only.
面向网页端 JavaScript 的 Node.js 补环境 Skill。适用于网页端 JS/Node.js 补环境、env.js/runner.js、缺失环境追踪、Proxy 探测、真实对象固化、toString/native-like、属性描述符/原型链/访问器/实例对象保护、addon-first、新版 addon API、xbs.dom.createDocument、createNativeCollection/getMimeTypesAndPlugins/jsEnv、通用代码变更记忆、中文注释质量、signer/probe 模块化门禁、document.all、Canvas/WebGL/WebGPU/Audio/字体/DOM 几何等指纹终端 API 真实值回放、长指纹日志 4000/4096 截断防护、WebAPI 环境检测矩阵、iframe/Worker/PerformanceObserver/DOM-CSSOM/task queue/writer 分支行为 diff、定位 sign/x-s/a_bogus/h5st/token、cURL/HAR 校验、动态 HTML/JS 资源过期识别与运行时刷新、验证码接口确认与 web-verify-patcher 交接、JS bundle/chunk/sourcemap 收集、XHR/fetch Hook 与 source/entry/builder/writer 链路、Node 泄露阻断、Cookie 生成链路、补环境框架选择(默认不使用,可选 isolated-vm/vm/jsEnv)、TLS 指纹兼容请求客户端、XHR/fetch live session bridge、curl_cffi 同 session 桥接、浏览器对象私有状态泄露阻断、对象形状审计矩阵、中文阶段报告、最终总结/API回放分类明细、高强度检测通用门禁、native能力缺口、ruyiPage/RuyiTrace、Camoufox/MCP、CloakBrowser 取证、isTrusted 可信输入规避、addon / xbs isolated-vm ABI 恢复。不要用于 App/移动端/小程序/Windows/Native 逆向、纯算重写;默认不主动分析 JSVMP 源码。
- Grade
- D
- Quality
- 64 / 100
- Safety
- Passed
- GitHub stars
- 312
Unproven: rated by static analysis only, not yet compared head-to-head.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 77 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- Low-risk patterns
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- mentions secrets in text
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.