What it does
Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
Skills ZICQ category：Agent Workflows browser-extension-reverse
Browser Extension Reverse
Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
Official URL：skills.sh
What this skill does
Intro in this page language first. The official description stays in its original wording; we do not rewrite SKILL.md.
When to use it
The official description does not include a separate “Use when”. Per the spec, agents activate this skill when the task matches keywords in that description.
How agents load it
Per Agent Skills progressive disclosure: name and description load at startup (~100 tokens); the full SKILL.md body loads when the skill activates; scripts/, references/, and assets/ load only as needed. This file's sections: Browser Extension Reverse Engineering; ACTION REQUIRED（读完后立刻执行）; 适用场景; 工作流; 1. 包体; 2. 逻辑.
File analysis
File analysis: besides SKILL.md, the body references references/extension-analysis.md. Those resources load on demand.
Browser Extension Reverse EngineeringACTION REQUIRED（读完后立刻执行）适用场景工作流1. 包体2. 逻辑3. 动态工具链参考路由上下文任务完成自检
Source category：skills.sh agent-skill
Sources & links
SKILL.md & Agent activation
Official spec ↗namebrowser-extension-reversedescription- Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
- DiscoverThe client exposes names and descriptions to the agent.
- ActivateYour request or the task context selects the skill and loads its instructions.
- Load resourcesReferenced scripts, documentation and assets are used when needed.
Files referenced by the instructions · 1
references/extension-analysis.md
These paths are extracted from the text. Check the upstream package to verify the files exist.
Invocation syntax and available tools depend on your Agent client. Client integration guide ↗
Install this skill
Skills CLI ↗Choose the target agent and installation scope, keep referenced package files, then verify the skill appears in the client's catalog.
This skill references supporting files. Retrieve the complete directory from the source; copying SKILL.md alone may leave missing dependencies.
Ask your Agent to install
Copy these instructions to a compatible agent and confirm the target directory matches your client.
Install the agent skill "browser-extension-reverse" into my project. The full SKILL.md and official description are at https://zicq.com/en/skills/skl-e1485645306e4d5f-Browser-Extension-Reverse.html Save it as .cursor/skills/browser-extension-reverse/SKILL.md or .claude/skills/browser-extension-reverse/SKILL.md and keep the frontmatter name and description exactly as-is. This skill also ships scripts/, references/, or assets/ — fetch the whole folder from https://github.com/zhaoxuya520/reverse-skill instead of creating only a SKILL.md.
Install from the terminal · Skills CLI
Requires Node.js and npx. First inspect the repository's skill list to confirm the name.
npx skills add 'https://github.com/zhaoxuya520/reverse-skill' --list
npx skills add 'https://github.com/zhaoxuya520/reverse-skill' --skill 'browser-extension-reverse'
The CLI lets you choose the agent interactively. The default scope is the project; use -g for user scope. Confirm package availability with the discovery command, then use npx skills list to inspect installed skills.
Readable layout
---
name: browser-extension-reverse
description: Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
---
# Browser Extension Reverse Engineering
## ACTION REQUIRED（读完后立刻执行）
1. `NOW`: 读取 `../field-journal/precedent-reverse.md`
2. `NOW`: 确认目标是**浏览器扩展**（crx/xpi/解压目录），不是普通网页 JS（普通 → `js-reverse/`）
3. `NEXT`: 解压扩展；读 manifest
4. `ACT`: 权限面 → 后台脚本 → 网络/存储钩子
## 适用场景
- Chrome/Edge MV2/MV3 扩展分析
- Firefox 扩展
- 恶意扩展 IOC、供应链扩展投毒调查
- 扩展实现的签名/加密/代理逻辑还原
## 工作流
### 1. 包体
```text
□ crx 解压 / 从 profile 取扩展目录
□ manifest.json：permissions、host_permissions、background、content_scripts
□ 评估过度权限（、webRequest、debugger）
```
### 2. 逻辑
```text
□ service_worker / background 入口
□ content_script 注入点与世界（isolated）
□ chrome.storage / IndexedDB 密钥
□ 与 `js-reverse` 相同：Observe 网络与消息传递（runtime.sendMessage）
```
### 3. 动态
```text
□ 开发者模式加载解压目录
□ chrome://extensions 检查错误
□ DevTools 附加 service worker
□ 必要时 Frida/浏览器 CDP（jshookmcp）
```
## 工具链
| 工具 | 用途 |
|------|------|
| 解压/jq | manifest |
| Chrome DevTools | worker 调试 |
| js-reverse 工具链 | 深度 JS |
| YARA | 恶意扩展规则 |
## 参考
- `references/extension-analysis.md`
- field-journal 扩展恢复相关条目
- `../js-reverse/` `../malware-analysis/`
## 路由上下文
**上游**: MASTER R30
**下游**: 复杂混淆 JS → `js-reverse`；投毒调查 → supply-chain / malware
## 任务完成自检
- [ ] 是否列出权限面与入口脚本？
- [ ] 是否还原关键数据流？
- [ ] Checklist？
Related skills
Agent Workflows
Skill Creator
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that exte…
Agent Workflows
Clawdhub
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fl…
Agent Workflows
Agent Team Orchestration
Orchestrate multi-agent teams with defined roles, task lifecycles, handoff protocols, and review workflows. Use when: (1) Setting up a team …
Agent Workflows
Superpowers
Spec-first, TDD, subagent-driven software development workflow. Use when: (1) building any new feature or app — triggers brainstorm → plan →…