CtrlK
BlogDocsLog inGet started
Tessl Logo

dsl-vm-reverse

Reverse JavaScript-based custom DSL/VM interpreters, non-standard WASM-like runtimes, and risk-control engines. Use when analyzing IIFE or switch-based opcode dispatchers, extracting instruction tables, recovering bytecode semantics, capturing VM state at runtime, or reconstructing execution flow.

68

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, code-heavy reverse-engineering workflow with clear phasing and executable scripts for the core phases. Its main weaknesses are inlined reference material that belongs in separate files and some verbosity and duplication across sections.

Suggestions

Move the 26-row opcode reference table (section 4) and the runtime-capture schemes (section 5) into separate reference files under references/ and link to them from SKILL.md to improve progressive disclosure.

Remove the duplicated opcode coverage: keep either the Phase 3 extraction/classification script or the section 4 static table, not both, to reduce redundancy and token cost.

Drop the emoji title and the 'ACTION REQUIRED' preamble, and either justify or remove the routing-registration section, which is meta-content that does not advance the reverse-engineering task.

DimensionReasoningScore

Conciseness

The body is dense and code-forward with most tokens earning their place, but the emoji title, the theatrical 'ACTION REQUIRED' preamble, the duplicated opcode coverage (Phase 3 code plus the section 4 table), and the meta routing-registration section are minor instances of over-explanation that could be trimmed.

4 / 5

Actionability

Phases 1–4 provide copy-paste-ready, executable Python scripts, but Phase 5–6 are more descriptive and the section 2 code features use illustrative fragments with '...' placeholders, leaving minor gaps.

4 / 5

Workflow Clarity

Phases 1–6 are clearly sequenced with time estimates, Phase 1 provides classification and exclusion gates, Phase 6 is a conditional escalation, the status-code table gives retry guidance, and section 7 is a checklist — but mid-workflow validation checkpoints are implicit rather than explicit.

4 / 5

Progressive Disclosure

The 375-line body is a single monolith with good section headers and a TOC, but no bundle files exist and large reference material (the 26-row opcode table, the multi-scheme runtime-capture section) is inlined where it should be split into separate one-level-deep reference files.

3 / 5

Total

15

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly conveys both the skill's purpose and its trigger conditions with concrete, domain-appropriate action verbs. The only minor weakness is jargon-heavy trigger terms that miss some natural synonyms or file extensions.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'reverse ... DSL/VM interpreters', 'extracting instruction tables', 'recovering bytecode semantics', 'capturing VM state at runtime', 'reconstructing execution flow' — giving comprehensive coverage of the skill's capabilities.

5 / 5

Completeness

Explicitly answers both 'what' ('Reverse JavaScript-based custom DSL/VM interpreters...') and 'when' ('Use when analyzing IIFE or switch-based opcode dispatchers...') with concrete trigger phrases, matching the anchor 5 example.

5 / 5

Trigger Term Quality

Good keyword coverage with domain terms like 'DSL/VM', 'IIFE', 'opcode dispatchers', and 'risk-control engines', but the language is jargon-heavy and lacks natural synonyms or file extensions that would push it to anchor 5.

4 / 5

Distinctiveness Conflict Risk

Targets a clear niche (custom JS DSL/VM interpreters, non-standard WASM-like runtimes, risk-control engines) with distinctive triggers like IIFE and switch-based opcode dispatchers, minimizing overlap with other skills.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.