# Wasm Module Inspect

> Inspect a compiled .wasm binary — validates structure, lists exports and imports, detects SIMD and threading opcodes, and reports binary size. Requires wabt; wasm-opt (Binaryen) is optional.

- **Type:** Skill
- **Install:** `agentstack add skill-gertsylvest-meta-team-wasm-module-inspect`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [gertsylvest](https://agentstack.voostack.com/s/gertsylvest)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [gertsylvest](https://github.com/gertsylvest)
- **Source:** https://github.com/gertsylvest/meta-team/tree/main/library/skills/wasm-module-inspect

## Install

```sh
agentstack add skill-gertsylvest-meta-team-wasm-module-inspect
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# WASM Module Inspect

Inspect a compiled `.wasm` binary to verify it is valid, understand its public API surface, and detect compilation features (SIMD, threads).

## Requirements

- **wabt** (`wasm-validate`, `wasm2wat`) — install via `brew install wabt` (macOS), `apt install wabt` (Linux), or from https://github.com/WebAssembly/wabt/releases
- **wasm-opt** (optional, Binaryen) — install via `brew install binaryen` for feature reporting

## Instructions

The argument is in `$ARGUMENTS`. Pass it directly to the inspection script:

```bash
bash "$(dirname "$0")/inspect.sh" $ARGUMENTS
```

## Output sections

| Section | What it reports |
|---|---|
| `SIZE` | Binary size in bytes and KB |
| `VALID` | Pass/fail from `wasm-validate` |
| `EXPORTS` | All exported functions, memories, tables, globals |
| `IMPORTS` | All imported functions (JS host functions the module depends on) |
| `SIMD` | Whether `v128` (WASM SIMD) opcodes are present |
| `THREADS` | Whether `atomic` instructions are present (requires `SharedArrayBuffer`) |
| `FEATURES` | Full feature list from `wasm-opt --print-features` (if available) |

## Typical usage

```bash
# After an Emscripten build — confirm exports match expected API
bash inspect.sh build/my-dsp.wasm

# Before deploying — confirm SIMD is present in the optimised build
bash inspect.sh dist/processor.wasm
```

## What to look for

- **Exports** should be minimal — only the functions the JS/worklet layer calls (e.g. `_init`, `_process`, `_destroy`). Unexpected exports indicate `-s EXPORTED_FUNCTIONS` was not set correctly.
- **SIMD present** confirms `-msimd128` was applied and the WASM binary actually contains vectorised code.
- **Threads present** means the page must be served with `COOP`/`COEP` headers — flag this if the deployment environment does not support them.
- **Large binary size** may indicate the Emscripten filesystem (`-s FILESYSTEM=0` not set) or C++ RTTI/exceptions were not disabled.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [gertsylvest](https://github.com/gertsylvest)
- **Source:** [gertsylvest/meta-team](https://github.com/gertsylvest/meta-team)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-gertsylvest-meta-team-wasm-module-inspect
- Seller: https://agentstack.voostack.com/s/gertsylvest
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.