jygzycjygzycCommunityยท1 Agent Skills Included

jiap

Android decompilation, vulnerability hunting, reporting, and PoC construction

Decompiles Android APKs, DEX files, and framework JARs through a JADX-based server with CLI and MCP access. Hunts real vulnerabilities across app components and Binder services using evidence-gated tracing instead of guesswork. Generates bilingual security reports and buildable proof-of-concept apps from finalized findings, removing manual reverse-engineering toil.
npx skills add jygzyc/jiap --all -g -y
Available:

Explains the DECX architecture and request flow so the agent knows how the CLI, server, and skills fit together when running analysis workflows.

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install jiap?โ–ผ

Run `npx skills add jygzyc/jiap --all -g -y` in your terminal to install all skills in this suite globally.

What does DECX do for Android analysis?โ–ผ

It decompiles APKs and framework JARs via JADX and exposes code search, source lookup, xrefs, manifest, and component inspection through a CLI, HTTP API, and MCP server.

How does decx-vulnhunt find real vulnerabilities?โ–ผ

It traces attacker-controlled input from entrypoint to dangerous sink with strict evidence gates, then applies a risk-rating authority before calling anything a finding.

Can DECX generate reports and PoC exploits?โ–ผ

Yes. The decx-report skill produces HTML and bilingual Markdown reports, and decx-poc builds a ready-to-compile Android PoC app from each finalized finding.

Does DECX work with Claude Code and other agents?โ–ผ

Yes. The skills follow the standard SKILL.md format and can be linked into Claude Code, Codex, Cursor, and other compatible clients.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’