agentmods.dev

web-reverse-env

web-reverse-env is a skill for Codex from guccig4366/xbsReverseSkill. It costs 121 tokens per session (2,149 once invoked), scanned A, a copy of web-reverse-env, MIT.

A workflow for making JavaScript that expects a web browser run in another environment, such as Node.js. It diagnoses missing browser objects and behaviors, including prototypes, property descriptors, storage, canvas, WebGL, and workers.

In plain words
What is it for?
Collecting browser-environment details, observing runtime errors, building modular compatibility patches, and validating them. It is useful for web fingerprinting, verification challenges, and browser-dependent scripts.
Why use it?
It prevents blindly recreating an entire browser when only a small missing behavior is needed. It helps reveal what the code actually checks and when running inside a real browser is the better option.

Skill for Codex

Written for Codex: agents/openai.yaml present.

not rated 8repo +1 13d ago A scan 121 tokens copy · 100% MIT

Good fit Collecting browser-environment details, observing runtime errors, building modular compatibility patches, and validating them. It is useful for web fingerprinting, verification challenges, and browser-dependent scripts.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/guccig4366/xbsreverseskill/web-reverse-env
View source ↗ guccig4366/xbsReverseSkill
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add guccig4366/xbsReverseSkill --skill web-reverse-env
Clone the repo
git clone --depth 1 https://github.com/guccig4366/xbsReverseSkill

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for web-reverse-env

README.md
[![agentmods](https://agentmods.dev/badge/skills/guccig4366/xbsreverseskill/web-reverse-env/github.svg)](https://agentmods.dev/skills/guccig4366/xbsreverseskill/web-reverse-env)
Your own site
<a href="https://agentmods.dev/skills/guccig4366/xbsreverseskill/web-reverse-env"><img src="https://agentmods.dev/badge/skills/guccig4366/xbsreverseskill/web-reverse-env/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for web-reverse-env

Your own site · 80×15
<a href="https://agentmods.dev/skills/guccig4366/xbsreverseskill/web-reverse-env"><img src="https://agentmods.dev/badge/skills/guccig4366/xbsreverseskill/web-reverse-env.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 121 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,149 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00121 $0.02149
Opus 5.5 $0.00048 $0.00860
Sonnet 5.5 $0.00024 $0.00430
Haiku 4.5 $0.00012 $0.00215

Measured 1mo ago against content hash 811eec62eacf, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

web-reverse-env scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 15 executable files (scripts/analyze-gap-log.js, scripts/build-crypto-module.js, scripts/build-document-module.js, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to web-reverse-env — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

web-reverse-env/SKILL.md · 214 lines

How it starts

The opening of the file, as written. The whole thing — 214 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Web逆向补环境

概览

使用这个技能时，不要把“补环境”理解成给 window/document/navigator 随便补几个值。

先把任务视为四类问题之一：

  1. 缺对象或缺属性，代码直接报 undefined
  2. 对象存在，但原型链、描述符、getter/setter、toString 暴露
  3. 基础对象能跑，但被指纹、栈、异步对象、通信对象继续检测
  4. 补环境成本过高，应切换到浏览器内执行或 JsRpc/WebSocket 替代路线

默认优先走“诊断驱动”的补环境路线，而不是一次性补全浏览器。

快速分流

根据任务特点，优先读取对应参考文档：

标准工作流

1. 先判断目标路线

优先判断当前任务属于哪一类：

  • 只需要最小补丁让样本跑通
  • 需要做成可复用模块
  • 需要沉淀为 skill / 框架
  • 需要高强度检测点补齐
  • 需要切换到浏览器内执行或 JsRpc

如果是最后一种，不要硬补到底。

2. 先采集，再诊断

如果用户还没有真实浏览器样本：

  • 优先使用 collect-browser-env.js
  • 采集 navigator、document、location、history、screen
  • 采集 cookie、localStorage、sessionStorage
  • 采集基础 canvas/webgl 指纹

如果用户已经有运行日志或报错：

  • 优先使用 observe-runtime.js
  • 让缺失路径、描述符探测、原型链探测、调用错误先浮出来

不要在没有诊断信息的前提下大面积硬补对象。

3. 按模块补，而不是按页面乱补

补环境时，优先按模块推进：

  1. prototype-builder
  2. descriptor-guard
  3. native-protector
  4. 浏览器对象模块
  5. performance-module
  6. crypto-module
  7. fingerprint-module
  8. audio-fingerprint-module
  9. webrtc-module
  10. worker-module
  11. proxy-observer
  12. math-precision-module
  13. stack-clean-module
  14. document-all-module

如果站点一开始就死在 document.all，把特殊对象优先级前置。

4. 先补“能继续执行”的缺口

补丁优先级默认如下：

  1. undefined 或缺对象导致主流程中断
  2. getter / setter / 方法的 Illegal invocation
  3. 原型链和描述符不一致
  4. native toString 暴露
  5. 指纹异常
  6. 异步对象、通信对象、高强度检测点

5. 把高强度检测点单独看

遇到下面这些对象时，不要按“普通 BOM/DOM 补值”处理：

Read the full file on GitHub · 214 lines

Files

What ships with it

35 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 214 lines · 121 tokens per session scan A 811eec62eacf

Subscribe to this mod's changes

web-reverse-env is a skill published in the GitHub repository guccig4366/xbsReverseSkill (8 stars, last pushed 13d ago), licensed MIT. It adds 121 tokens to every session and 2,149 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to web-reverse-env, differing in 0 lines, and is treated as a copy.

3dBrowser automationbookmarkbuild-systemccesiumcesiumjs
Related

Other skills, from other repositories

chili3d

Use when building or extending browser-based 3D CAD in TypeScript with Chili3D — npm-workspaces source build (rspack), chili-wasm Open CASCADE bindings, command and Plugin contracts with .chiliplugin packaging, STEP/IGES/BREP/STL exchange, ribbon and i18n contributions, measurement tools. Chili3D: a pure-web…

znlgis/opengis-skills · 90 tokens

supersplat

Use when editing 3D Gaussian Splatting (3DGS) .ply models in browser — cleanup noise/floaters, crop, transform, color-adjust, animate camera, publish online. SuperSplat: open-source browser-based 3DGS editor by PlayCanvas with PLY/compressed PLY/Splat/SOG/SPZ export.

znlgis/opengis-skills · 75 tokens

lightcad

Use when building or extending a desktop CAD/BIM application with the open-source FeiYang LightCAD platform — plugin development, custom elements, DWG/DXF I/O, 2D drafting and 3D/BIM modeling on C#/.NET. LightCAD (FeiYang Integrated Design Platform) is a C# CAD system integrating 2D design, 3D design, and BIM.

znlgis/opengis-skills · 85 tokens

cesium-map

Open and operate the Cesium MCP 3D map, create map objects and GeoJSON layers, or inspect the selected object in the connected map.

gaopengbin/cesium-mcp · 34 tokens

browser-video-recording

Create polished 60 fps 4:3 4K browser screen-recording style videos from Codex in-app browser captures, with browser-only crop, natural macOS cursor styling, deliberate click choreography, zoom-follow framing, ffprobe/thumbnail verification, and optional native recording compatibility checks. Use when the user asks to…

nirholas/three.ws · 114 tokens

Calcul de chemin d'escalade 3D sur mesh

Génère un algorithme en C# pour Unity permettant de calculer un chemin d'escalade sur un mesh 3D (montagne/falaise) entre deux points, en utilisant une projection sur plan et des raycasts pour assurer un chemin droit et praticable.

ECNU-ICALK/AutoSkill · 71 tokens