{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/plugins/android-reverse-engineering/skills/android-reverse-engineering/SKILL.md",
    "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/plugins/android-reverse-engineering/.claude-plugin/plugin.json",
    "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/.claude-plugin/marketplace.json",
    "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/LICENSE"
  ],
  "category": "agent-workflows",
  "description_en": "Claude Code plugin and agent skill that drives jadx and Fernflower/Vineflower to decompile Android APK, XAPK, JAR and AAR files and document their HTTP APIs. A fingerprint pass first identifies the app's framework, HTTP stack, obfuscation level and native libraries, then shell scripts extract endpoints and authentication patterns across Retrofit, OkHttp, Volley, Ktor and Apollo/GraphQL, trace call flows from UI down to the network layer, and rebuild original Kotlin class names from the metadata R8 leaves behind. It installs through the bundled Claude Code marketplace, and its scripts also run standalone with a /decompile slash command.",
  "description_zh": "Claude Code 插件及智能体技能，驱动 jadx 与 Fernflower/Vineflower 反编译 Android 的 APK、XAPK、JAR 和 AAR 文件并记录其 HTTP 接口。它先用指纹步骤识别应用的框架、HTTP 栈、混淆程度和原生库，再通过 shell 脚本在 Retrofit、OkHttp、Volley、Ktor 和 Apollo/GraphQL 等栈中提取接口与鉴权特征，追踪从界面到网络层的调用链，并利用 R8 无法剥除的元数据还原原始的 Kotlin 类名。技能通过自带的 Claude Code marketplace 安装，其脚本也可独立运行，并提供 /decompile 斜杠命令。",
  "entry_url": "https://awesomerea.org/resources/android-reverse-engineering-skill/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/android-reverse-engineering-skill/",
  "evidence_url": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/0c7cf89830993df7dfc178498f69952262808bea/README.md",
  "group": "agents",
  "id": "android-reverse-engineering-skill",
  "json_url": "https://awesomerea.org/resources/android-reverse-engineering-skill/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/android-reverse-engineering-skill/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/android-reverse-engineering-skill/index.md",
  "name": "Android Reverse Engineering Skill",
  "name_zh": "Android Reverse Engineering Skill 安卓反编译智能体技能",
  "record_type": "resource",
  "relationship": "independent-agent-integration",
  "requirements": [
    "A Claude Code client with plugin/skill support; install by adding SimoneAvogadro/android-reverse-engineering-skill as a marketplace and installing the android-reverse-engineering plugin, or from a local clone. The reviewed plugin manifest is version 1.5.0 on the master commit, ahead of the latest GitHub release v1.1.0 (2026-04-27).",
    "The skill runs external tools it does not bundle: Java JDK 17+ and the jadx CLI are required, and Vineflower or Fernflower plus dex2jar are optional for better Java output; a dependency checker and an OS-detecting install helper are provided. Bash scripts are the primary path, with experimental PowerShell equivalents for Windows.",
    "Users supply the Android packages to analyze; the repository ships no app files. Work is static decompilation, API documentation, call-flow tracing and Kotlin name recovery; the author reports roughly complete recovery of the Repository/ViewModel/UseCase classes on a typical app, which is a project-reported figure.",
    "Apache-2.0 for the skill; the decompilers and other driven tools keep their own licenses. The README limits use to lawful purposes such as authorized security research, interoperability analysis, and malware analysis, and places responsibility on the user."
  ],
  "requirements_zh": [
    "需要支持插件/技能的 Claude Code 客户端；安装方式为将 SimoneAvogadro/android-reverse-engineering-skill 添加为 marketplace 并安装 android-reverse-engineering 插件，或从本地克隆安装。所审阅的插件清单在 master 提交上为 1.5.0 版，高于最新的 GitHub 发布版本 v1.1.0（2026-04-27）。",
    "该技能调用的外部工具均不随附：必须安装 Java JDK 17+ 和 jadx 命令行；Vineflower 或 Fernflower 以及 dex2jar 为可选项，可改善 Java 反编译质量。技能提供依赖检查脚本和可识别操作系统的安装辅助脚本。Bash 脚本为主要方式，Windows 另有处于实验阶段的 PowerShell 等价脚本。",
    "待分析的 Android 安装包由用户自行提供，仓库不含任何应用文件。工作内容为静态反编译、接口文档整理、调用链追踪和 Kotlin 类名还原；作者称在典型应用上可还原几乎全部 Repository/ViewModel/UseCase 类，此为项目自报数据。",
    "技能本身采用 Apache-2.0；被驱动的各反编译器和其他工具保留各自许可。README 将用途限定于合法目的，例如经授权的安全研究、互操作性分析和恶意软件分析，并将责任归于使用者。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}