P
pktq/lasik
BLA blinds your agent
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Official descriptionBLA blinds your agent. LASIK gives it its sight back. Static de-blinding CLI + MCP server that undoes BLA (Blind LLM Agents) hardening so coding agents and REA can read the real code again. Never executes the target.
Install & config
Client config (built from the install command this repo gives)
{
"mcpServers": {
"pktq-lasik": {
"command": "npx",
"args": ["lasik-agents"]
}
}
}Parsed from the README we fetched on 2026-11-09; we have not executed it.
command/args come from the install command the repository states. When it is ambiguous, the project README wins.
VS Code (.vscode/mcp.json - the key is servers)
{
"servers": {
"pktq-lasik": {
"command": "npx",
"args": ["lasik-agents"]
}
}
}Same server, but VS Code keeps it under <code>servers</code>.
Claude Code (command line)
claude mcp add --transport stdio pktq-lasik -- npx lasik-agents
Claude Code does not read a config file; add the server with this command.
Key names differ by client: Clients & CLI
- Star count
- 128 ★ · pktq/lasik · read from the GitHub search API · (checked 2026-11-13 20:00:50)
- Source
- read directly from its GitHub page · type: open-source project
- Harvest history
- first seen 2026-11-10 · last seen 2026-11-14 · seen 5× · listed by 1 sources
- Score
- score 103 · 128 ★ · 1 sources · repo
- Install
npx lasik-agents
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
npx lasik-agents. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: 开源项目. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository
pktq/lasik；first catalogued 2026-11-10；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.English · 简体中文 · 日本語 · 한국어 · Español
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
Read code that was built to hide from AI.
LASIK removes BLA anti-agent hardening so coding agents and REA can analyse the real program.
How it works ·
Benchmark ·
Changelog
BLA protects a release from AI agents by burying it: thousands of opaque predicates, encrypted strings, decoy "hardware enclave" code, checks that break the program if decoys are removed, multi-megabyte padding, and text written to make the model give up. LASIK takes all of that back out, statically, and hands your agent the program that is actually there.
## Highlights
1,262× fewer tokens to read BLA's own CrackMe corpus: about 21 million down to 17 thousand.
Proven, not guessed. Predicates are folded only when LASIK can prove their value; anti-strip checks are recomputed before any decoy is touched; files without BLA keep their code unchanged.
Never runs the target. No eval, no sandbox, no WebAssembly instantiation, so it is safe on hostile input, including malware that adopts BLA.
A prompt firewall that strips the text BLA plants for the model: fake system turns, refusal bait, "nothing to see here" notices.
Every format BLA ships, checked against real BLA 3.2.1 output: JavaScript and TypeScript bundles, inline HTML, WebAssembly, Electron ASAR and fuses, source maps, Python and .pyc, native ELF/PE/Mach-O, Bun, SQLite, safetensors and GGUF, PCAP, JVM, .NET, BEAM, EVM, PTX, ZIP/APK/DEX, plists, IL2CPP and UF2 firmware.
Names back where the program publishes them: a function BLA renamed to primeSparseStack_719 but exports as clampPan is clampPan again; other BLA names become neutral p0, v0 instead of misleading ones.
Keeps up with BLA: every BLA source file is hashed in coverage/bla.json, and a weekly job opens an issue the moment BLA changes.
Built for agents: a CLI, an MCP server for Claude Code, Cursor, Codex and seven more, and a library API.
## Installation
bash
npm install -g lasik-agents # or run any command with npx lasik-agents
Requires Node.js 20.19 or later. To build from source: git clone https://github.com/pktq/lasik && cd lasik && npm ci && npm run build.
## Usage
Scan a build to see what BLA did to it, then write a cleaned copy:
console
$ lasik scan bench/bla-crackme
Verdict: BLINDED · blindness 100/100 · 15 file(s) carry BLA artifacts
AI-evasion techniques found: 24
Sight restored: 1.8 MB → 37.5 KB, ~21,104,859 → ~16,718 tokens
$ lasik heal ./dist # writes a cleaned copy to ./dist.lasik
Point your agent, or REA, at the healed copy:
bash
npx -y rea-agents@latest analyze-javascript-application "$PWD/dist.lasik" --json
Other commands: lasik firewall (redact prompt decoys from any text), lasik bench, lasik doctor. Add --json or --md for machine-readable reports and --fail-on blinded to gate CI.
### In your coding agent
bash
lasik setup # registers the MCP server; --dry-run to preview, --remove to undo
| Tool | |
| lasik_scan | Which BLA layers a file or folder carries, a 0–100 blindness score and the AI-evasion techniques found |
| lasik_read | One file with BLA removed, for the agent to read instead of the original |
| lasik_heal | A cleaned copy of a whole app, ready for REA |
| lasik_firewall | Planted instructions redacted from any text |
LASIK removes BLA anti-agent hardening so coding agents and REA can analyse the real program.
How it works ·
Benchmark ·
Changelog
BLA protects a release from AI agents by burying it: thousands of opaque predicates, encrypted strings, decoy "hardware enclave" code, checks that break the program if decoys are removed, multi-megabyte padding, and text written to make the model give up. LASIK takes all of that back out, statically, and hands your agent the program that is actually there.
## Highlights
1,262× fewer tokens to read BLA's own CrackMe corpus: about 21 million down to 17 thousand.
Proven, not guessed. Predicates are folded only when LASIK can prove their value; anti-strip checks are recomputed before any decoy is touched; files without BLA keep their code unchanged.
Never runs the target. No eval, no sandbox, no WebAssembly instantiation, so it is safe on hostile input, including malware that adopts BLA.
A prompt firewall that strips the text BLA plants for the model: fake system turns, refusal bait, "nothing to see here" notices.
Every format BLA ships, checked against real BLA 3.2.1 output: JavaScript and TypeScript bundles, inline HTML, WebAssembly, Electron ASAR and fuses, source maps, Python and .pyc, native ELF/PE/Mach-O, Bun, SQLite, safetensors and GGUF, PCAP, JVM, .NET, BEAM, EVM, PTX, ZIP/APK/DEX, plists, IL2CPP and UF2 firmware.
Names back where the program publishes them: a function BLA renamed to primeSparseStack_719 but exports as clampPan is clampPan again; other BLA names become neutral p0, v0 instead of misleading ones.
Keeps up with BLA: every BLA source file is hashed in coverage/bla.json, and a weekly job opens an issue the moment BLA changes.
Built for agents: a CLI, an MCP server for Claude Code, Cursor, Codex and seven more, and a library API.
## Installation
bash
npm install -g lasik-agents # or run any command with npx lasik-agents
Requires Node.js 20.19 or later. To build from source: git clone https://github.com/pktq/lasik && cd lasik && npm ci && npm run build.
## Usage
Scan a build to see what BLA did to it, then write a cleaned copy:
console
$ lasik scan bench/bla-crackme
Verdict: BLINDED · blindness 100/100 · 15 file(s) carry BLA artifacts
AI-evasion techniques found: 24
Sight restored: 1.8 MB → 37.5 KB, ~21,104,859 → ~16,718 tokens
$ lasik heal ./dist # writes a cleaned copy to ./dist.lasik
Point your agent, or REA, at the healed copy:
bash
npx -y rea-agents@latest analyze-javascript-application "$PWD/dist.lasik" --json
Other commands: lasik firewall (redact prompt decoys from any text), lasik bench, lasik doctor. Add --json or --md for machine-readable reports and --fail-on blinded to gate CI.
### In your coding agent
bash
lasik setup # registers the MCP server; --dry-run to preview, --remove to undo
| Tool | |
| lasik_scan | Which BLA layers a file or folder carries, a 0–100 blindness score and the AI-evasion techniques found |
| lasik_read | One file with BLA removed, for the agent to read instead of the original |
| lasik_heal | A cleaned copy of a whole app, ready for REA |
| lasik_firewall | Planted instructions redacted from any text |
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/pktq-lasik/)
- Source
- github · https://github.com/pktq/lasik
- Browse by field
- Open source
- Traction
- 128 ★
- added
- today
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.