decompile

Route binary artifacts to compatible decompilation tools for analysis.

5|Updated Mar 27, 2026
One-click install
npx skills add https://github.com/barkleesanders/claude-code-starter --skill decompile-barkleesanders
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: decompile
Source: https://github.com/barkleesanders/claude-code-starter/tree/main/skills/decompile
Command: npx skills add https://github.com/barkleesanders/claude-code-starter --skill decompile-barkleesanders

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Reverse-engineering arbitrary binary artifacts often wastes hours fumbling with incompatible tools, as defaulting to a single decompiler like Ghidra fails for modern formats like Android APKs, browser extensions, and WebAssembly modules. This skill eliminates that friction by automatically routing each artifact to the optimal tool for its format.

Core Features & Use Cases

  • Universal Artifact Routing: A curated routing table covers 20+ file classes including native executables (Mach-O, ELF, PE), JVM bytecode, Android/iOS apps, browser extensions, WebAssembly, Python bytecode, React Native Hermes bundles, .NET assemblies, installers, and firmware blobs.
  • Verified Tool Inventory: Pre-configured paths and usage instructions for 20+ industry-standard reverse-engineering tools including Ghidra, radare2, jadx, apktool, frida, and mitmproxy, with known-gap workarounds for common installation issues.
  • Lawful Use Guardrails: Built-in scope rules ensure all work is performed only on artifacts the user lawfully owns or is authorized to test, with explicit refusals for DRM bypass, malware weaponization, and unauthorized system access.
  • Use Case: A security researcher triaging a suspicious Android APK can use this skill to automatically route the file to jadx for Java/Kotlin decompilation and apktool for resource extraction, instead of wasting time trying to load the APK into Ghidra.

Quick Start

Use the decompile skill to reverse-engineer the local Android app file 'suspicious-app.apk' and extract its API endpoints and native library functions.

Frequently Asked Questions about decompile

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decompile an Android APK for security research?

To decompile an Android APK, the skill routes it to jadx for Java/Kotlin decompilation and apktool for resource extraction, avoiding wasted effort loading it into native executable tools. This automated routing handles both code and asset analysis.

What is the best way to reverse-engineer WebAssembly modules and browser extensions?

Reverse-engineering WebAssembly modules and browser extensions requires format-specific tools rather than defaulting to a single decompiler. The skill automatically classifies these file classes and routes them to optimal compatible tools for accurate binary analysis.

Can I use Ghidra for firmware analysis and Python bytecode decompilation?

Ghidra is configured for native executables like Mach-O, ELF, and PE, but it fails for Python bytecode and firmware blobs. This skill routes firmware and Python bytecode to their optimal compatible tools instead of forcing incorrect tooling.

Does this approach support batch decompilation and string extraction across different binary formats?

Batch decompilation and string extraction are supported across native executables, JVM bytecode, .NET assemblies, and React Native Hermes bundles. The skill classifies each artifact and applies the correct tool for import and string extraction.

When should I not use automated binary decompilation routing?

Automated binary decompilation routing is restricted to artifacts you lawfully own or are authorized to test. It explicitly refuses DRM bypass, malware weaponization, and unauthorized system access to maintain lawful use guardrails.