SimoneAvogadroSimoneAvogadroCommunityยท1 Agent Skills Included

android-reverse-engineering-skill

Decompile Android apps and extract their hidden API endpoints

Decompiles Android APK, XAPK, JAR, and AAR files and extracts the HTTP APIs they call, including Retrofit, OkHttp, Ktor, and GraphQL endpoints. Recovers original Kotlin class names from R8-obfuscated apps and traces call flows from screens down to network requests. Eliminates hours of manual reverse engineering by producing structured API documentation automatically.
npx skills add SimoneAvogadro/android-reverse-engineering-skill --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install android-reverse-engineering-skill?โ–ผ

Run `npx skills add SimoneAvogadro/android-reverse-engineering-skill --all -g -y` in your terminal to install the skill globally.

How to extract API endpoints from an Android APK?โ–ผ

Decompile the APK with this skill, then run its API scan to list every Retrofit, OkHttp, Ktor, or GraphQL endpoint with URLs, headers, and auth patterns.

Can it handle obfuscated Kotlin apps?โ–ผ

Yes. It recovers original Kotlin class names from metadata that R8 obfuscation cannot strip, restoring most Repository, ViewModel, and UseCase names.

What tools do I need to run this skill?โ–ผ

You need Java JDK 17+ and jadx. Fernflower, Vineflower, and dex2jar are optional but improve decompilation quality.

Does it work with Claude Code and other AI agents?โ–ผ

Yes. It follows the standard SKILL.md format and runs in Claude Code and other compatible AI coding agents via natural language or the /decompile command.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’