web-reverse

web-reverse is a Penetration testing & red team skill for AI agents, published by zhongjiaxiong in the web-reverse-skill-notes-20260319 repository on GitHub. Skillspace rates web-reverse C (72/100) and it passed the safety scan; the rating is based on static analysis only.

Web前端逆向工程技能：用于逆向网页前端 JS/WASM 逻辑、解混淆/脱壳、bundle 分析（Webpack/Vite/Rollup）、JS‑VM/自定义VM字节码还原、WebCrypto/自定义加密与 API 签名算法复现、source map 重建、浏览器反调试绕过、协议/请求重放与 CTF Web 题。凡用户提到“逆向某网站/还原签名或加密参数/恢复 JS 逻辑/抓包重放/VM/WASM/ob‑fuscator/JSFuck/eval‑pack”等都必须触发。本技能不用于前端开发/性能优化/通用加密教学/渗透扫描/Android 逆向。

Grade
C
Quality
72 / 100
Safety
Passed
GitHub stars
40

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

View source on GitHubzhongjiaxiong/web-reverse-skill-notes-20260319

Our review

Architecture
91 / 100
Maturity
Structured: ships references or scripts
Security scan
Low-risk patterns
License
Not declared. Check the repository before reusing it.
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

More Penetration testing & red team skills

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.