CtrlK
BlogDocsLog inGet started
Tessl Logo

browser-extension-reverse

Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.

71

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, token-efficient skill body with clear phased workflow and a verified single-level reference. Actionability and mid-flow validation could be slightly more explicit.

Suggestions

Add one or two concrete commands (e.g. unzip/crx extraction command, chrome://extensions load-unpacked path) to lift actionability from high-level steps to executable steps.

Insert an explicit validation checkpoint after unpacking/loading the extension (e.g. confirm manifest parsed and service worker attaches without errors) before proceeding to logic analysis.

Optionally surface crx/xpi as trigger synonyms in the description to broaden natural keyword coverage.

DimensionReasoningScore

Conciseness

Lean checklists, a compact tool table, and short phase sections assume Claude's competence with no concept padding; every section earns its place.

5 / 5

Actionability

Concrete checklist items (manifest fields, DevTools attach service worker, Frida/CDP) and named tools are actionable, but most guidance is high-level instruction rather than copy-paste commands.

4 / 5

Workflow Clarity

Sequenced NOW/NEXT/ACT phases plus a task-completion self-check give a clear sequence with a checkpoint, though explicit mid-flow validation (e.g. confirm unpack succeeded) is only weakly present.

4 / 5

Progressive Disclosure

A short overview body points to a single real one-level-deep reference (references/extension-analysis.md) and sibling skills, with clearly signaled navigation and well-organized sections.

5 / 5

Total

18

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, specific description that clearly states both capability and trigger. Trigger-term coverage could add file-extension synonyms, but distinctiveness and completeness are strong.

DimensionReasoningScore

Specificity

"manifest analysis, background workers, and extension-based credential or traffic logic recovery" lists several concrete actions with only minor coverage gaps (e.g. permissions auditing is implied, not explicit).

4 / 5

Completeness

"Use for authorized reverse engineering of browser extensions... including manifest analysis, background workers..." explicitly answers both what it does and when to use it via a concrete trigger clause.

5 / 5

Trigger Term Quality

"browser extensions (Chrome/Firefox)" are natural terms, but common synonyms like "crx", "xpi", or "malicious extension" are missing.

4 / 5

Distinctiveness Conflict Risk

The browser-extension reverse-engineering niche is clearly distinct from generic JS RE, with minimal conflict risk against sibling skills.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.