SimoneAvogadro/android-reverse-engineering-skill

Health v2 · maintenance only

Adoption not part of the score

7376 stars · 825 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses, including Retrofit, OkHttp, Ktor, and Apollo endpoints, auth patterns, and hardcoded URLs. It also recovers original Kotlin class names from R8-obfuscated binaries and fingerprints app frameworks before full decompilation.

Use cases

• extract HTTP API endpoints from an Android APK without source code
• decompile an obfuscated Android app and recover original Kotlin class names
• document the backend APIs used by a mobile app
• reverse engineer Retrofit and OkHttp calls from an APK
• identify whether an Android app is Flutter, React Native, or native before analysis
• find authentication headers and request-signing schemes in an Android app
• trace call flows from activities down to HTTP requests in a decompiled app

When to choose

• you need to document or reproduce an Android app's HTTP API without its source
• you are analyzing R8/ProGuard-obfuscated Kotlin apps and need original class names
• you want a guided, skill-driven workflow inside Claude Code for APK triage and decompilation
• you need to handle modern Kotlin/KMP stacks like Ktor, Apollo, and Koin, not just Retrofit

When to avoid

• you need a standalone GUI reverse-engineering tool rather than a Claude Code skill
• you are reverse engineering iOS or non-Android binaries
• you require guaranteed legal clearance - reverse engineering apps may be restricted by terms of service or law
• you need deep dynamic analysis or runtime instrumentation rather than static decompilation

Facets

plugin · maturity active

reverse-engineering parser developer-tools security reverse-engineering android-tools developer-tools security apis cli windows cross-platform claude-code-skill apk-decompilation api-extraction kotlin r8-deobfuscation jadx retrofit okhttp ktor mobile-security linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SimoneAvogadro/android-reverse-engineering-skill")