js-reverse
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes a bootstrap script (scripts/bootstrap-reverse.ps1) to install external dependencies including Node.js, the anything-analyzer repository, and the jshookmcp tool. These resources are retrieved from community-sourced locations rather than official vendor repositories.
- [DYNAMIC_EXECUTION]: The workflow requires capturing JavaScript from untrusted target websites and executing it locally within a Node.js environment or a browser context using evaluate_script to validate analysis results.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from arbitrary external websites. 1. Ingestion points: Tools such as js-reverse_new_page and js-reverse_get_script_source fetch content from user-specified URLs. 2. Boundary markers: A mandatory confirmation gate is defined to ensure authorization before any data extraction occurs. 3. Capability inventory: The skill has access to subprocess execution for Node.js and file writing for task artifacts. 4. Sanitization: No explicit sanitization or filtering of the analyzed JavaScript is mentioned.
- [COMMAND_EXECUTION]: Documentation describes using PowerShell to run a bootstrap script that modifies the system environment and registers MCP servers.
Audit Metadata