browser-extension-reverse SKILL.md skillA
browser-extension-reverse from novaestellar/novahaku is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add novaestellar/novahaku/browser-extension-reverse@git:20260910.546fe86Pins git:20260910.546fe86 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- novaestellar/novahaku
- Path
testing/browser-extension-reverse/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260910.546fe86, committed Sep 10, 2026
- Size
- 2,038 bytes
- Repository stars
- 28
- License
- MIT
Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Browser Extension Reverse Engineering ## ACTION REQUIRED（读完后立刻执行） 1. `NOW`: 读取 `../field-journal/precedent-reverse.md` 2. `NOW`: 确认目标是**浏览器扩展**（crx/xpi/解压目录），不是普通网页 JS（普通 → `js-reverse/`） 3. `NEXT`: 解压扩展；读 manifest 4. `ACT`: 权限面 → 后台脚本 → 网络/存储钩子 ## 适用场景 - Chrome/Edge MV2/MV3 扩展分析 - Firefox 扩展 - 恶意扩展 IOC、供应链扩展投毒调查 - 扩展实现的签名/加密/代理逻辑还原 ## 工作流 ### 1. 包体 ```text □ crx 解压 / 从 profile 取扩展目录 □ manifest.json：permissions、host_permissions、background、content_scripts □ 评估过度权限（<all_urls>、webRequest、debugger） ``` ### 2. 逻辑 ```text □ service_worker / background 入口 □ content_script 注入点与世界（isolated） □ chrome.storage / IndexedDB 密钥 □ 与 `js-reverse` 相同：Observe 网络与消息传递（runtime.sendMessage） ``` ### 3. 动态 ```text □ 开发者模式加载解压目录 □ chrome://extensions 检查错误 □ DevTools 附加 service worker □ 必要时 Frida/浏览器 CDP（jshookmcp） ``` ## 工具链 | 工具 | 用途 | |------|------| | 解压/jq | manifest | | Chrome DevTools | worker 调试 | | js-reverse 工具链 | 深度 JS | | YARA | 恶意扩展规则 | ## 参考 - `references/extension-analysis.md` - field-journal 扩展恢复相关条目 - `../js-reverse/` `../malware-analysis/` ## 路由上下文 **上游**: MASTER R30 **下游**: 复杂混淆 JS → `js-reverse`；投毒调查 → supply-chain / malware ## 任务完成自检 - [ ] 是否列出权限面与入口脚本？ …
Read the whole file at its exact version.
How to install
mdr add novaestellar/novahaku/browser-extension-reverse@sha256:749612154735f781The line at the top of this page pins the label git:20260910.546fe86, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kqsk3qk5xqkh3bau)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 10, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2038 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
novaestellar/novahaku · 28 stars · license MIT · pushed 2026-09-28 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_kqsk3qk5xqkh3bau GET https://markdownregistry.com/api/v1/resolve?ref=novaestellar/novahaku/browser-extension-reverse GET https://markdownregistry.com/api/v1/blob/749612154735f781bc8ec0f88c1aa6f6fdcfa2c60e8eb5dbe75296191b9aa1f5
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from novaestellar/novahaku
Every file in novaestellar/novahaku