What kind of patterns can it detect?

It identifies 8 major obfuscation families using AST signatures, including string array resolution, variable renaming, and hex/unicode escape decoding.

Is this tool safe for analyzing live malware?

Yes, it includes a dynamic analysis workflow using isolated-vm to execute code in a secure sandbox, though static analysis is always recommended as the first, safer step.

Can it handle modern bundles like Webpack?

Absolutely; it features specialized workflows for bundle reversal, module boundary recovery, and developer intent reconstruction for Webpack, Rollup, and Vite.

Does it support automated reporting?

Yes, the tool can extract Indicators of Compromise (IOCs) and format them into industry-standard STIX 2.1 output for rapid triage and threat intelligence sharing.

Anti-Reversing & JS Deobfuscation Master

Name: Anti-Reversing & JS Deobfuscation Master
Author: Git-Fg

byGit-Fg

•

Security & Testing

Provides a comprehensive framework for identifying, deobfuscating, and analyzing protected JavaScript code and malware samples.

The Anti-Reversing Master skill is an advanced knowledge base and toolkit designed for security researchers and developers tasked with reverse engineering complex or obfuscated JavaScript. It streamlines the analysis process through intelligent routing, offering structured workflows for safe static AST transformations, sandboxed dynamic unpacking via isolated-vm, and module reconstruction for modern bundlers like Webpack, Rollup, and Vite. By combining pattern recognition with production-ready scripts, this skill enables users to uncover hidden logic, bypass anti-debugging protections, and extract critical Indicators of Compromise (IOCs) in standardized formats like STIX 2.1.

Key Features

01Secure dynamic unpacking within a controlled isolated-vm sandbox environment

02Module boundary recovery and source reconstruction for modern JS bundles

03Safe static deobfuscation using advanced AST transformations and constant folding

04Rapid IOC extraction with STIX 2.1 formatted output for threat intelligence

05Automated pattern recognition for 8 major JavaScript obfuscation families

061 GitHub stars

Use Cases

01Bypassing anti-debugging and anti-VM techniques during authorized security research

02Analyzing suspicious JavaScript samples for malware triage and behavior classification

03Reverse engineering production-grade bundles to audit third-party dependencies or logic

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add git-fg/thecattoolkit anti-reversing-master

For use in Claude.ai and ChatGPT

Download Skill