# App X-Ray

> Builds evidence-linked HTML/JSON reports, summary cards and diffs from REA analysis of app packages, native build metadata and model files. Its component and configuration findings come from static inputs; they are not observed runtime traffic, a complete security audit or reconstructed software.

- Type: Integration
- Targets: App · Binary
- Category: Community REA integrations
- Relationship: Community REA integration
- Sources reviewed: 2026-11-01
- Added to the catalog: 2026-11-01
- Original resource: <https://github.com/Eliot5566/app-xray>
- Primary source: <https://github.com/Eliot5566/app-xray/blob/66a7b06fb45d99e0e1d1dbcf221856a62639faab/README.md>
- Catalog page: <https://awesomerea.org/resources/app-xray-rea-evidence-reports/>
- Record JSON: <https://awesomerea.org/resources/app-xray-rea-evidence-reports/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/app-xray-rea-evidence-reports/index.md)

## Requirements & limits

- **Prerequisites:** README requires Node.js 22+; supported inputs include Electron/app.asar/source folders, APKs, Go/Rust executables and listed model formats. REA analysis requirements vary with the input.
- **Limits:** Rules see literal values and metadata; runtime-generated addresses are missed. A detected setting or dependency does not prove runtime behavior or exploitability, and unsupported/obfuscated inputs can leave unknowns.
- **Testing evidence:** The public gallery uses open-source app snapshots. Report-derived REA-Bench answers reuse those reports as their reference.
- **License:** Code is MIT; bundled Inter fonts retain SIL OFL 1.1. Reports omit target app code, and upstream software/model rights remain separate.

## Primary sources

1. <https://github.com/Eliot5566/app-xray/blob/66a7b06fb45d99e0e1d1dbcf221856a62639faab/README.md>
2. <https://github.com/Eliot5566/app-xray/blob/66a7b06fb45d99e0e1d1dbcf221856a62639faab/docs/en/guide.md>
3. <https://github.com/morluto/rea/discussions/7974>

## More in Agents and MCP

- [Hex-Rays IDA MCP](https://awesomerea.org/resources/hex-rays-ida-mcp/index.md) · Integration
- [GhidraMCP](https://awesomerea.org/resources/ghidramcp/index.md) · Integration
- [Binary Ninja MCP (official)](https://awesomerea.org/resources/binary-ninja-official-mcp/index.md) · Integration
- [Binary Ninja MCP (fosdickio)](https://awesomerea.org/resources/binary-ninja-community-mcp/index.md) · Integration
- [IDA Pro MCP (mrexodia)](https://awesomerea.org/resources/ida-pro-mcp-community/index.md) · Integration
- [Radare2 MCP Server](https://awesomerea.org/resources/radare2-mcp/index.md) · Integration

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.