Skip to content
Get packs

Android Reverse Engineering

Decompile Android apps and extract their API endpoints and call flows

Source Download skill
Repository
SimoneAvogadro/android-reverse-engineering-skill
Stars
8,616
Licence
Apache-2.0
Files
15 files

What it does

This skill teaches an AI agent to unpack Android app files (APK, XAPK, JAR, AAR) into readable Java or Kotlin source code using tools like jadx or Fernflower, then search that code for web API endpoints and trace how a button tap in the UI leads to network requests. It first runs a triage script to check whether the app is even a native Android app, since Flutter, React Native and similar apps need different tools. The output is structured notes about the app's APIs and call paths.

Great for

  • Security researchers auditing how a mobile app talks to its backend
  • Developers documenting or re-implementing an undocumented API from an app they are authorised to analyse
  • Interoperability or compatibility engineers studying a third-party app's network layer

Skip it if

  • Decompiling apps you do not own or have permission to analyse, which may breach licence terms or law in many places
  • Extracting or reusing secrets, API keys or tokens found in an app, since misuse can cause real harm to the vendor and its users
  • Flutter, React Native, Cordova or Xamarin apps, where the skill itself says Java decompilation is mostly useless

Try asking

  • “Decompile this app-release.apk and list all the HTTP API endpoints it calls”
  • “Find out whether this XAPK is a Flutter app before trying to decompile it”
  • “Trace the call flow from the login button screen down to the network request in this decompiled app”
  • “Recover readable names from the obfuscated classes in this APK using the deobfuscation option”
Step-by-step guide: how to use Android Reverse EngineeringInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 15 original files, the Apache-2.0 licence and an attribution note.

    android-reverse-engineering.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip android-reverse-engineering.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip android-reverse-engineering.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the fingerprint script first so you do not waste time decompiling a cross-platform app with the wrong tools.
  • Use the --no-res option for a faster code-only pass when you only need endpoints.
  • Review the scripts and the install step before running, since install-dep.sh may use sudo and download tools from the internet.

What's inside

  • references/api-extraction-patterns.md
  • references/call-flow-analysis.md
  • references/fernflower-usage.md
  • references/jadx-usage.md
  • references/kotlin-name-recovery.md
  • references/setup-guide.md
  • references/third_party_hosts.txt
  • scripts/check-deps.sh
  • scripts/decompile.sh
  • scripts/find-api-calls.sh
  • scripts/fingerprint.sh
  • scripts/install-dep.sh
  • scripts/lookup-name.sh
  • scripts/recover-kotlin-names.sh
  • SKILL.md

Redistributed unmodified from SimoneAvogadro/android-reverse-engineering-skill under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.