DSL VM Reverse Engineering
Guides an agent through reverse-engineering custom JavaScript bytecode VMs and risk-control engines.
- Repository
- zhaoxuya520/reverse-skill
- Stars
- 43,969
- Licence
- MIT
- Files
- 1 file
What it does
This skill gives an AI agent a structured playbook for analysing obfuscated JavaScript that acts as its own custom virtual machine, the kind used by some anti-bot or risk-control systems. It teaches the agent how to recognise these interpreters, classify their opcodes, map constant tables, and capture runtime state to reconstruct what the code does. It is a reverse-engineering methodology guide rather than a tool that runs on its own.
Great for
- Security researchers analysing anti-bot or risk-control JavaScript
- Developers studying how obfuscated custom interpreters work
- Students learning bytecode and VM reverse engineering techniques
Skip it if
- Attacking or bypassing production systems you do not own or have no authorisation to test, since the workflow targets live risk-control engines and could enable abuse
- Standard WebAssembly binaries or ordinary webpack bundles, which the skill itself redirects to other guides
Try asking
- “Analyse this 583KB single-line JS file and tell me whether it is a custom DSL VM.”
- “Extract the opcode table and classify each case in this switch-based dispatcher.”
- “Help me map the constant table C[9] references in this obfuscated interpreter.”
- “Trace how the exported getToken function reaches the interpreter loop.”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the MIT licence and an attribution note.
dsl-vm-reverse.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip dsl-vm-reverse.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip dsl-vm-reverse.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Start with the file classification step on a local copy so the agent confirms it is a DSL VM before deeper analysis.
- Use offline samples or a lab environment as the skill itself recommends, rather than live production sites.
- Review any Python or browser automation snippets before running them, since they execute code and drive a browser.
What's inside
- SKILL.md
Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.