lasik
by pktq
BLA blinds your agent. LASIK gives it its sight back. Static de-blinding CLI + MCP server that undoes BLA (Blind LLM Agents) hardening so coding agents and REA can read the real code again. Never executes the target.
74stars
9forks
TypeScript
Added 11/10/2026
Available after the catalog security scan passes.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
The deep catalog scan for this skill is still queued. Run an instant dependency check now instead.
AI Agentsai-agentsanti-blablaclaude-codedeobfuscationdeobfuscatorelectronjavascriptlasikllm-securitymalware-analysismcpmcp-serverprompt-injectionreareverse-engineeringstatic-analysiswebassembly
Maintainer of this skill?
Installation
# Add to your Claude Code skills
git clone https://github.com/pktq/lasikGetting Started
Guides for using ai agents skills like lasik.
- Caveman: Cut Claude Token Use by 65%How agent-side prompt compression works, when to use it, and when not to.
- How to Test an AI Skill: A Practical Guide to EvalsEvaluate skills with realistic fixtures, a baseline, and repeatable checks.
- Getting Started with AI SkillsFirst-time install walkthrough for Claude Code, Codex CLI, and ChatGPT.
Compare with similar skills
See how lasik compares with popular alternatives.
LASIK reads a protected build, proves which parts are protection (opaque predicates, encrypted strings, decoy code, tamper checks, binary padding, prompt-injection text), removes them, and writes a clean copy. It never runs the input.
Highlights
- 1,262× fewer tokens on the public BLA CrackMe corpus: about 21 million down to 17 thousand.
- Proof-based. A transform runs only when LASIK can prove it preserves behaviour. Unprotected files come back byte-identical.
- Structural detection. Protection is recognised by behaviour, not identifiers; a renamed-build benchmark runs in CI.
- Static only. No
eval, no sandbox, no WebAssembly instantiation; safe on hostile input. - Prompt-injection firewall for text planted to steer the model.
- 21 formats: JavaScript and TypeScript bundles, inline HTML, WebAssembly, Electron ASAR and fuses, source maps, Python and
.pyc, native ELF/PE/Mach-O, Bun, SQLite, safetensors and GGUF, PCAP, JVM, .NET, BEAM, EVM, PTX, ZIP/APK/DEX, plists, IL2CPP and UF2 firmware. - Name recovery where the program still publishes the original name (exports, imports); neutral names elsewhere.
- Agent integration: CLI, MCP server for Claude Code, Cursor, Codex and seven more, and a library API.
Installation
npm install -g lasik-agents # or run any command with npx lasik-agents
Requires Node.js 20.19 or later. To build from source: git clone https://github.com/pktq/lasik && cd lasik && npm ci && npm run build.
Usage
Scan a build, then write a cleaned copy:
$ lasik scan bench/bla-crackme
Verdict: BLINDED · blindness 100/100 · 15 file(s) carry BLA artifacts
AI-evasion techniques found: 24
Sight restored: 1.8 MB → 37.5 KB, ~21,104,859 → ~16,718 tokens
$ lasik heal ./dist # writes a cleaned copy to ./dist.lasik
Point your agent or analysis tool at the healed copy, for example REA:
npx -y rea-agents@latest analyze-javascript-application "$PWD/dist.lasik" --json
Other commands: lasik firewall (redact planted instructions from any text), lasik bench, lasik doctor. Add --json or --md for machine-readable reports and --fail-on blinded to gate CI.
In your coding agent
lasik setup # registers the MCP server; --dry-run to preview, --remove to undo
| Tool | |
|---|---|
lasik_scan |
Protection layers in a file or folder, a 0–100 blindness score and the techniques found |
lasik_read |
One file with protection removed, for the agent to read instead of the original |
lasik_heal |
A cleaned copy of a whole app |
lasik_firewall |
Planted instructions redacted from any text |
The repository also ships an agent skill for agents that encounter protected builds.
Benchmark
The public BLA CrackMes, vendored unchanged in bench/bla-crackme:
| CrackMe | Files | Before | After | Tokens (estimated) |
|---|---|---|---|---|
| v6 | 3 | 303 KB | 4.9 KB | 6,954,989 → 1,398 |
| v7 | 5 | 743 KB | 13.6 KB | 197,561 → 3,483 |
| v8 | 3 | 362 KB | 6.7 KB | 6,972,491 → 4,748 |
| v9 | 4 | 381 KB | 7.4 KB | 6,977,670 → 4,941 |
On a project we hardened ourselves with the published bla-agents@3.2.1, one file per format (details):
| BLA run | Files | Original | BLA-hardened | After LASIK | Tokens (estimated) | Result |
|---|---|---|---|---|---|---|
| Defaults | 21 | 151.9 KB | 31.1 MB | 150.9 KB | 32,154,076 → 152,102 | 21/21 healed, 11 byte-identical |
| All opt-in layers | 21 | 151.9 KB | 31.2 MB | 151.0 KB | 32,178,121 → 152,197 | 21/21 healed, 10 byte-identical |
Per-file numbers, the method and its caveats are in docs/benchmark.md. LASIK makes the CrackMes readable; it does not publish their solutions.
Resilience
npm run bench:renamed heals the same builds twice: as shipped, and with every generated identifier, comment, WASM section, long export name and ASAR path respelled and commutative operands reordered, with behaviour unchanged. Because detection is structural, both heal to nearly the same result. CI fails if the respelled run removes more than one point less.
| Format | As shipped: removed | Respelled: removed |
|---|---|---|
| JavaScript / TypeScript | 98.78% | 98.09% |
| HTML | 99.29% | 99.17% |
| WebAssembly | 99.98% | 99.98% |
| Electron ASAR | 99.998% | 99.96% |
How it works
| Layer | What LASIK does |
|---|---|
| Opaque predicates | Proves constant conditions with a known-bits analysis and drops the dead branches |
| Anti-strip interlocks | Evaluates the check on a closed-subset interpreter and folds it before anything is removed |
| Encrypted and split literals | Decodes string tables with the key shipped beside them; re-joins split strings and integers |
| Decoys | Removes everything unreachable from real entry points |
| Tamper and domain locks | Removes them and reports the lock's terms |
| Runtime noise | Drops state churn and status blocks that nothing reads |
| Renamed identifiers | Restores names the program exports or imports; neutral names for the rest |
| Padding and planted data | Strips padding, trailers and planted entries from binaries, databases, models and archives, and rebuilds offsets and checksums |
| Planted instructions | Redacts them with 40 firewall rules |
Details are in docs/how-it-works.md. Two independent soundness reviews searched for inputs where healing changes behaviour or touches an unprotected file; every case found is fixed and pinned in tests/soundness.test.ts.
Format coverage
Pinned to BLA 3.2.2. 59/63 BLA shield files fully healed; 44 more emit nothing into artifacts. Full per-file table: docs/coverage.md.
| Surface | Status |
|---|---|
| .NET assembly | ✅ healed |
| Android APK | ✅ healed |
| Android DEX | ✅ healed |
| Apple plist | ✅ healed |
| Bun standalone | ✅ healed |
| Electron ASAR | ✅ healed |
| Erlang BEAM | ✅ healed |
| EVM bytecode | ✅ healed |
| Firmware UF2 | ✅ healed |
| GPU PTX | ✅ healed |
| JavaScript / HTML | 🟡 partial |
| JVM class | ✅ healed |
| Mobile game (DEX / IL2CPP) | ✅ healed |
| Native ELF / PE / Mach-O | 🟡 partial |
| PCAP | ✅ healed |
| Prompt text | ✅ healed |
| Python | ✅ healed |
| Safetensors / GGUF | ✅ healed |
| Sidecar entanglement | ✅ healed |
| Source maps | ✅ healed |
| SQLite | ✅ healed |
| WebAssembly | ✅ healed |
| ZIP / JAR / APK | ✅ healed |
Limitations
- Information the protection destroyed (local names, comments, original source maps, overwritten sections) cannot be recovered; LASIK reports it rather than inventing it.
- Healers are validated on real BLA 3.2.1 output for 21 formats (tests/fixtures/bla-3.2.1); Go, Flutter, Bun, BEAM, APK/DEX and IL2CPP so far on fixtures built from BLA's source.
- New protection techniques can need an update. Upstream changes are tracked weekly (coverage/bla.json), and builds protected with earlier versions stay supported.
Responsible use
LASIK is a deobfuscator. Use it on your own software, on malware and threat samples, in CTFs, and in audits you are authorised to perform. Removing protection from software you have no rights to can breach its licence or laws such as DM
Frequently Asked Questions
What is lasik?
lasik is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by pktq. BLA blinds your agent. LASIK gives it its sight back. Static de-blinding CLI + MCP server that undoes BLA (Blind LLM Agents) hardening so coding agents and REA can read the real code again. Never executes the target. It has 74 GitHub stars.
Is lasik safe to use?
lasik's catalog security scan is still queued. You can run an instant dependency and prompt-injection check now with the "Scan for vulnerabilities" button above.
How do I install lasik?
Clone the repository with "git clone https://github.com/pktq/lasik" and add it to your Claude Code skills directory (see the Installation section above).
What programming language is lasik written in?
lasik is primarily written in TypeScript. It is open-source under pktq on GitHub, so you can review or fork the full source.
Are there alternatives to lasik?
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh lasik against similar tools.
Comments (0)
to leave a comment.
No comments yet. Be the first to share your thoughts!
Related Skills
Reverse engineer anything with agents, from app behavior down to native binaries.
448,394
110,517
TypeScript
AI Agentsagent-skillsai
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
300,442
44,354
JavaScript
AI Agentsai-agentsanthropic
Skills for Real Engineers. Straight from my .agents directory.
250,518
21,171
Shell
AI Agents
An agentic skills framework & software development methodology that works.
234,966
20,863
Shell
AI Agentsaibrainstorming