jadx

Decompile Android APKs and DEX bytecode into readable Java source using JADX CLI.

612|102|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/yv1ing/Z3r0 --skill jadx-yv1ing
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: jadx
Source: https://github.com/yv1ing/Z3r0/tree/main/sandbox/.agents/skills/jadx
Command: npx skills add https://github.com/yv1ing/Z3r0 --skill jadx-yv1ing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Android APKs, DEX bytecode, and related artifacts are compiled and hard to inspect directly. This Skill solves the problem by decompiling them into readable Java source and resources using the Jadx CLI, enabling quick code comprehension, security reviews, and vulnerability research.

Core Features & Use Cases

  • Decompile APK, DEX, AAR, and JAR inputs into human-readable Java source and decoded resources.
  • Support deobfuscation and fallback modes to improve readability on obfuscated apps.
  • Use cases include app logic review, vulnerability discovery, hardcoded credential checks, API endpoint mapping, and reverse engineering for security assessments.

Quick Start

Install jadx and run a decompilation on your APK to produce source in the output directory.

Frequently Asked Questions about jadx

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decompile an Android APK to readable Java source?

You can decompile an Android APK to readable Java source by running the JADX CLI on the APK file, which outputs human-readable Java code and decoded resources into a specified writable directory.

What file formats can I decompile for Android reverse engineering?

For Android reverse engineering, you can decompile APK, DEX, AAR, and JAR file formats into human-readable Java source and decoded resources using the JADX CLI.

Do I need Java and JADX installed to decompile APKs?

Yes, you need JADX installed on your PATH and a Java runtime environment to decompile APKs, along with writable output directories for the generated source code and resources.

Can I decompile obfuscated Android apps to find hardcoded credentials?

Yes, you can decompile obfuscated Android apps to find hardcoded credentials using JADX's deobfuscation and fallback modes, which improve readability during vulnerability discovery and security assessments.

What is the best way to review app logic and map API endpoints from an APK?

The best way to review app logic and map API endpoints from an APK is decompiling it into readable Java source using JADX, enabling quick code comprehension for authorized security assessments.

Why does APK decompilation fail or produce unreadable Java source?

APK decompilation may produce unreadable Java source if the app is heavily obfuscated, but using JADX's deobfuscation and fallback modes can improve readability during reverse engineering tasks.