What Is android-reverse-engineering-skill?
APK decompilation support
Structured workflows for jadx, apktool, and related decompilation tools
Code analysis workflows
Systematic review of decompiled code for logic, data flows, and behaviors
Security vulnerability detection
Detection patterns for common Android vulnerabilities (insecure storage, exported components, hardcoded secrets, etc.)
Structured reverse engineering steps
A defined phase sequence that ensures complete coverage
How It Works
The skill defines a structured reverse engineering methodology with discrete phases:
Phase 1: Reconnaissance
Extract APK metadata, manifest analysis, permissions review, and entry point identification. The skill guides Claude through AndroidManifest.xml analysis with attention to exported components, dangerous permissions, and debug flags.
Phase 2: Static Analysis
Systematic review of decompiled Java/Kotlin source via jadx. The skill provides analysis patterns for authentication logic, data storage practices, network communication, cryptographic implementation, and third-party SDK usage.
Phase 3: Vulnerability Assessment
Structured checks against common Android vulnerability classes: insecure data storage, improper platform usage, insecure communication, insecure authentication, insufficient cryptography, client-side injection, poor code quality, code tampering, and reverse engineering exposure.
Phase 4: Documentation
Findings structured in a consistent format: vulnerability class, location (class + method), severity, evidence, and remediation recommendation.
Use Cases
- Security research: systematic analysis of apps for vulnerability disclosure
- Penetration testing: client-authorized security assessments
- Malware analysis: understanding suspicious APK behavior
- Competitive analysis: understanding how competitor apps implement features (where legally permitted)
- Compliance auditing: verifying your own apps meet security standards before release
How to Install android-reverse-engineering-skill?
npx skills add SimoneAvogadro/android-reverse-engineering-skill | Or download from GitHub https://github.com/SimoneAvogadro/android-reverse-engineering-skill