jsr-reverse

SUSPICIOUS. The skill is internally coherent as a reverse-engineering guide and shows no direct exfiltration, credential harvesting, installer abuse, or hidden execution. However, its stated purpose is to help an AI agent analyze and potentially bypass web JS protections, anti-debug logic, cookies, and token flows, which fits the high-risk category of offensive security/reverse-engineering capabilities for AI agents. Static command-injection findings do not represent real execution behavior.