#javascript

Use when a user needs to analyze frontend signatures, encrypted parameters, dynamic cookies, obfuscated JS or WASM, or when API collection keeps failing. Based on the open-source hello_js_reverse_skill (the repository does not declare a license): draw conclusions through controlled experiments and layered evidence, and only work on your own targets or targets you are authorized to test. Do not bypass paywalls, login protection, or CAPTCHAs. Use case: Have the Agent locate the origin of frontend signatures and cookies through controlled experiments, and reach conclusions backed by evidence.

Use when a user needs to locate front-end encryption functions (login passwords, request signing, response decryption) and wants the results turned into reusable JSRPC, a Flask service and Burp autoDecoder configuration. Based on the open-source js-reverse-automation--skill (Apache-2.0), connecting to a real browser via chrome-devtools-mcp. Only for your own targets or targets you are authorized to test; shut down the services when done. Use case: Let the agent find front-end encryption entry points in a real browser and deliver callable services and Burp configuration.