Overview
Unlock the inner workings of Android applications with this powerful Claude Code skill. Designed for developers, security researchers, and analysts, this tool automates the complex process of decompiling Android APK, XAPK, JAR, and AAR files. Its primary focus is to extract crucial HTTP API information, including Retrofit endpoints, OkHttp calls, hardcoded URLs, and authentication patterns, enabling you to document, understand, and reproduce app functionality without needing the original source code.
Key Features
- Comprehensive Decompilation: Leverages industry-leading tools like
jadxandFernflower/Vineflowerto decompile a wide range of Android archive formats, offering single-engine or side-by-side comparison for optimal results. - API & Endpoint Extraction: Automatically identifies and documents HTTP API endpoints, Retrofit declarations, OkHttp network requests, and embedded URLs, providing a clear view of an app's external communication.
- Authentication Pattern Analysis: Detects common authentication headers and token usage, crucial for understanding security protocols and access controls.
- Intelligent Call Flow Tracing: Maps the journey of data and requests from UI components (Activities/Fragments) through business logic layers (ViewModels, Repositories) down to the actual network calls.
- Code Obfuscation Navigation: Includes strategies for effectively analyzing and navigating code obfuscated by ProGuard/R8, a common challenge in reverse engineering.
- Easy Integration: Seamlessly installs via Claude Code's plugin marketplace or from a local Git clone, with intuitive slash commands (
/decompile) and natural language interaction. - Versatile Usage: Supports manual script execution for granular control and integration into custom workflows.
Typical Use Cases
- Security Auditing: Quickly identify potential API vulnerabilities, hardcoded credentials, and data leakage points in Android applications.
- Interoperability Analysis: Understand how an app communicates with backend services to facilitate integration or develop compatible tools.
- Malware Analysis: Deconstruct malicious Android applications to understand their communication channels and data exfiltration methods.
- Educational Purposes: Learn about Android app architecture, networking patterns, and the practical application of decompilation techniques.
- API Documentation: Generate documentation for APIs used by Android apps when original source code or API specifications are unavailable.
- Third-Party Library Analysis: Examine the network behavior and API interactions of AAR libraries without requiring their source code.
