Directory · Skills

Android Reverse Engineering & API Extraction

Claude Code skill that decompiles APK/XAPK/JAR/AAR files and extracts the HTTP APIs an Android app uses, for security researchers.

★ 8,140 stars · last updated 2026-10-12 · Free, open source · View on GitHub

Best for

• Extracting Retrofit, OkHttp, Ktor and Apollo GraphQL endpoints from Android apps
• Recovering original Kotlin class names from R8-obfuscated binaries
• Tracing call flows from Activities through ViewModels to HTTP calls
• Fast pre-decompile triage of framework, HTTP stack and obfuscation level

Install

/plugin marketplace add SimoneAvogadro/android-reverse-engineering-skill
/plugin install android-reverse-engineering@android-reverse-engineering-skill

Our take

Requires Java JDK 17+ and the jadx CLI, with Vineflower/Fernflower and dex2jar optional; scripts can also be run standalone outside Claude Code. Its Kotlin metadata-based name recovery and coverage of Ktor, Apollo and Koin set it apart from tools focused only on Retrofit/OkHttp. PowerShell scripts for Windows are marked experimental, and the README stresses use only for lawful purposes such as authorized security research.

Similar skills

• Karpathy-Inspired Claude Code Guidelines: A single CLAUDE.md with four principles to curb overengineering, silent assumptions, and unrelated edits in Claude Code.
• Scientific Agent Skills: A library of 177 Agent Skills that guide coding agents through scientific packages, databases, and research workflows.
• reverse-skill: Skill router pack that directs AI coding agents to the right methodology and tools for reverse engineering, pentesting, and security tasks.
• book-to-skill: Converts technical books, document folders, or source collections into structured Agent Skills for Claude Code and other coding agents.
• Hallmark: Design skill for Claude Code, Cursor, and Codex that builds, audits, and redesigns UI while avoiding generic AI-generated looks.
• Claude Skills (alirezarezvani): Large MIT-licensed library of 380+ agent skills, agents, and commands for Claude Code, Codex, Gemini CLI, Cursor, and other coding agents.