# Android Reverse Engineering Skill

> Claude Code plugin and agent skill that drives jadx and Fernflower/Vineflower to decompile Android APK, XAPK, JAR and AAR files and document their HTTP APIs. A fingerprint pass first identifies the app's framework, HTTP stack, obfuscation level and native libraries, then shell scripts extract endpoints and authentication patterns across Retrofit, OkHttp, Volley, Ktor and Apollo/GraphQL, trace call flows from UI down to the network layer, and rebuild original Kotlin class names from the metadata R8 leaves behind. It installs through the bundled Claude Code marketplace, and its scripts also run standalone with a /decompile slash command.

- Type: Integration
- Targets: App
- Category: Independent agent workflows
- Relationship: Independent agent integration
- Sources reviewed: 2026-10-19
- Added to the catalog: 2026-10-19
- Original resource: <https://github.com/SimoneAvogadro/android-reverse-engineering-skill>
- Primary source: <https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/README.md>
- Catalog page: <https://awesomerea.org/resources/android-reverse-engineering-skill/>
- Record JSON: <https://awesomerea.org/resources/android-reverse-engineering-skill/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/android-reverse-engineering-skill/index.md)

## Requirements & limits

- A Claude Code client with plugin/skill support; install by adding SimoneAvogadro/android-reverse-engineering-skill as a marketplace and installing the android-reverse-engineering plugin, or from a local clone. The reviewed plugin manifest is version 1.5.0 on the master commit, ahead of the latest GitHub release v1.1.0 (2026-04-27).
- The skill runs external tools it does not bundle: Java JDK 17+ and the jadx CLI are required, and Vineflower or Fernflower plus dex2jar are optional for better Java output; a dependency checker and an OS-detecting install helper are provided. Bash scripts are the primary path, with experimental PowerShell equivalents for Windows.
- Users supply the Android packages to analyze; the repository ships no app files. Work is static decompilation, API documentation, call-flow tracing and Kotlin name recovery; the author reports roughly complete recovery of the Repository/ViewModel/UseCase classes on a typical app, which is a project-reported figure.
- Apache-2.0 for the skill; the decompilers and other driven tools keep their own licenses. The README limits use to lawful purposes such as authorized security research, interoperability analysis, and malware analysis, and places responsibility on the user.

## Primary sources

1. <https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/README.md>
2. <https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/plugins/android-reverse-engineering/skills/android-reverse-engineering/SKILL.md>
3. <https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/plugins/android-reverse-engineering/.claude-plugin/plugin.json>
4. <https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/.claude-plugin/marketplace.json>
5. <https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/LICENSE>

## More in Agents and MCP

- [Reverify](https://awesomerea.org/resources/reverify-claim-verifier/index.md) · Integration
- [DecompAI](https://awesomerea.org/resources/decompai/index.md) · Integration
- [Kong](https://awesomerea.org/resources/kong-agentic-reverse-engineer/index.md) · Integration
- [Co-op Anything](https://awesomerea.org/resources/coop-anything/index.md) · Integration
- [DeepExtract (DeepExtractIDA)](https://awesomerea.org/resources/deepextract-ida/index.md) · Integration
- [Mizuchi](https://awesomerea.org/resources/mizuchi-matching-decompilation-pipeline/index.md) · Integration

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.