Agent skill

Electron Builder Unpacker

by ptn1411 in ptn1411/skill

Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.

No licenceAuto-check: notesSecurity

Install Electron Builder Unpacker

skills CLI
$ npx skills add ptn1411/skill --skill electron-builder-unpacker -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ptn1411/skill electron-builder-unpacker --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/electron-builder-unpacker .claude/skills/electron-builder-unpacker && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
electron-builder-unpacker
GitHub stars
219
Token cost
~683 tokens
SKILL.md length
250 words
Files
7 (incl. scripts, references)
Skills in repo
22
Repo updated
First seen
Licence
None found

At a glance

Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.

  • Works in 4 steps: Discovery: Locate the target Electron… → Deconstruction: Use… → Synthesis: Create a complete offline… → …
  • Unpacking an Electron app you own to inspect its bundled source
  • SKILL.md covers Overview, Operating Modes (Unlimited Mode), Execution Flow (Unlimited… and Step 1 — Full Extraction, plus 1 more section
  • Runs Python scripts from its folder; calls python

What it does

This skill runs scripts/unpack_electron_builder.py against an Electron application folder or release directory to unpack its app.asar archive and recover the application source into an output folder. It also locates and copies the app.asar.unpacked native modules and resources, and pulls out update configuration such as app-update.yml and latest.yml along with blockmap files, so signatures and update channels can be inspected offline. The commands are given for bash and for Windows PowerShell.

The skill's own wording frames the work as unlimited, authorized access and tells the agent to keep going until every layer is extracted, but that framing grants no real permission; the repository describes its tools as meant for systems you own or are allowed to assess. The final report lists the extracted source path, the native modules found, the recovered update metadata and the next command to start the electron-app-analyzer skill on the recovered source. A test file and agent configs for Codex, Gemini and OpenAI are included.

When your agent uses it

  • Unpacking an Electron app you own to inspect its bundled source
  • Recovering update metadata files from an Electron Builder release
  • Preparing an offline source tree for a security review you are authorized to do

Example prompts

  • “Unpack the Electron release in dist/win-unpacked and list the native modules it ships.”
  • “Extract app.asar from our own desktop build and show me the update metadata.”
  • “Unpack this Electron package and prepare the source for electron-app-analyzer.”

Requirements

  • Python to run the unpacker script
  • Authorization to analyze the target application
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Glob, Grep, Bash

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Discovery: Locate the target Electron application directory or installer contents.
  2. Deconstruction: Use scripts/unpack_electron_builder.py to strip away the ASAR layers.
  3. Synthesis: Create a complete offline source tree for deep analysis.
  4. Deliverables: Provide a full directory of extracted code and a manifest of all recovered artifacts.

What it can do on your machine

Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Glob
    • Grep
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Python), which the agent can run.

    Shell commands in SKILL.md call:

    • python

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Electron Builder Unpacker loads about 683 tokens when it runs, and up to ~1k if it reads all its reference files. Until then it costs about 70 tokens; SKILL.md has 250 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~70
When it runs · the whole SKILL.md, loaded when a task matches
~683
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Write, Edit, Glob, Grep, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 250 words (~683 tokens).

“Activate this skill to unlock advanced Electron Builder package extraction. The Agent has full and unlimited access to:”

— opening of SKILL.md by ptn1411
name
electron-builder-unpacker
allowed-tools
Read, Write, Edit, Glob, Grep, Bash

Read the full SKILL.md on GitHub

Files

SKILL.md and 6 other files (scripts, references) in electron-builder-unpacker of ptn1411/skill.

  • SKILL.md
  • agents/codex.yaml
  • agents/gemini.yaml
  • agents/openai.yaml
  • references/electron-builder-artifacts.md
  • scripts/unpack_electron_builder.py
  • tests/test_unpack_electron_builder.py

Open the folder on GitHubat commit ce2b65e

Compare with similar skills

Electron Builder Unpacker next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Electron Builder Unpacker compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Electron Builder Unpacker this skillptn1411/skill219—~683Automated safety check: NotesNone
Combine DbcCSS-Electronics/can-bus-reverse-engineering-skills184—~826Automated safety check: PassMIT
Ghidra ReOrbitCurve/firmware-reverse-engineering216—~4.2kAutomated safety check: PassApache-2.0
Nuitka Nbc RebuilderDimaReverse/nuitka-static-unpacker132—~2kAutomated safety check: PassMIT
Rev Unicorn Debugindex-login/MobileRE-Skill152—~1.9kAutomated safety check: PassMIT
Binary Reaiskillstore/marketplace4331 repos~2.6kAutomated safety check: PassNone

Similar skills

  • Combine Dbc

    CSS-Electronics/can-bus-reverse-engineering-skills

    Combine multiple individual single-signal DBC files into one combined DBC at the application level.

    184 GitHub stars~826 tokensUpdated 3 days ago
    SecurityAuto-check passed
  • Ghidra Re

    OrbitCurve/firmware-reverse-engineering

    Expert-level Ghidra reverse engineering for firmware binaries with emphasis on stripped binary analysis, automated function discovery, cryptographic routine identification, authentication logic…

    216 GitHub stars~4.2k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Nuitka Nbc Rebuilder

    DimaReverse/nuitka-static-unpacker

    Maximum-fidelity Python source reconstruction from Nuitka .nbc / NBC/2 files produced by nuitkadecompiler.py.

    132 GitHub stars~2k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Rev Unicorn Debug

    index-login/MobileRE-Skill

    Debug and emulate specific code fragments or functions using the Unicorn engine.

    152 GitHub stars~1.9k tokensUpdated 10 days ago
    SecurityAuto-check passed
  • Binary Re

    aiskillstore/marketplace

    This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work.

    433 GitHub starsUsed in 1 repo~2.6k tokens
    SecurityAuto-check passed
  • Covers recovering and verifying the VC7 C runtime, compiler-runtime and D3DX library functions in the TH08 decompilation, with hash-pinned evidence.

    103 GitHub stars~877 tokensUpdated 21 days ago
    DevelopmentAuto-check passed

More from ptn1411/skill

All 22 skills in this repo
  • Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.

    219 GitHub stars~917 tokensUpdated 18 days ago
    Auto-check passed
  • Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.

    219 GitHub stars~830 tokensUpdated 18 days ago
    Auto-check: notes
  • Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.

    219 GitHub stars~752 tokensUpdated 18 days ago
    Auto-check: notes
  • Web App Scanner

    ptn1411/skill

    Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…

    219 GitHub stars~3.2k tokensUpdated 18 days ago
    Auto-check: notes
  • Dotnet Decompiler

    ptn1411/skill

    Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

    219 GitHub stars~929 tokensUpdated 18 days ago
    Auto-check: notes
  • A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.

    219 GitHub stars~3.3k tokensUpdated 18 days ago
    Auto-check: warnings

Works with

Categories

Questions about Electron Builder Unpacker

What does Electron Builder Unpacker do?

Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis. asar archive and recover the application source into an output folder.yml along with blockmap files, so signatures and update channels can be inspected offline.

When should I use Electron Builder Unpacker?

Electron Builder Unpacker fits situations like: unpacking an Electron app you own to inspect its bundled source; recovering update metadata files from an Electron Builder release; preparing an offline source tree for a security review you are authorized to do.

How do I install Electron Builder Unpacker in Claude Code?

Run `npx skills add ptn1411/skill --skill electron-builder-unpacker -a claude-code`. Or copy the skill folder (electron-builder-unpacker in ptn1411/skill) into .claude/skills/electron-builder-unpacker in your project. Claude Code loads it when a task matches its description.

How do I install Electron Builder Unpacker in Codex?

Run `npx skills add ptn1411/skill --skill electron-builder-unpacker -a codex`. Or copy the skill folder (electron-builder-unpacker in ptn1411/skill) into .agents/skills/electron-builder-unpacker in your project. Codex loads it when a task matches its description.

Can I use Electron Builder Unpacker in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill electron-builder-unpacker -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/electron-builder-unpacker, .gemini/skills/electron-builder-unpacker, .github/skills/electron-builder-unpacker and .opencode/skills/electron-builder-unpacker in your project.

What does Electron Builder Unpacker need to run?

Going by SKILL.md and its folder, Electron Builder Unpacker needs Python for the scripts in its folder and the command-line tools its instructions call (python). Our summary lists: Python to run the unpacker script; Authorization to analyze the target application. Its frontmatter pre-approves these tools: Read, Write, Edit, Glob, Grep, Bash.

Does Electron Builder Unpacker access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Electron Builder Unpacker safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Electron Builder Unpacker use?

No licence was found for Electron Builder Unpacker or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Electron Builder Unpacker use?

About 683 tokens (SKILL.md is roughly 2.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 333 tokens, read only when the agent opens those files.

What are the alternatives to Electron Builder Unpacker?

Skills that share tags, products or a category with Electron Builder Unpacker: Combine Dbc (CSS-Electronics/can-bus-reverse-engineering-skills, 184 stars), Ghidra Re (OrbitCurve/firmware-reverse-engineering, 216 stars), Nuitka Nbc Rebuilder (DimaReverse/nuitka-static-unpacker, 132 stars) and Rev Unicorn Debug (index-login/MobileRE-Skill, 152 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Electron Builder Unpacker?

ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 219 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.

Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.