SimoneAvogadro/android-reverse-engineering-skill

{   "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",

"$schema": "https://anthropic.com/claude-code/marketplace.schema.json",

"name": "Simone Avogadro"       },       "repository": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",

},       "repository": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",       "license": "Apache-2.0",

"repository": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",

"name": "Simone Avogadro"   },   "homepage": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",

},   "homepage": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",   "repository": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",

"homepage": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",

"repository": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",

"documentationUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill#readme",

"license": "Apache-2.0",   "supportUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/issues/new",   "termsOfServiceUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/master/LICENSE",

"supportUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/issues/new",

"termsOfServiceUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/master/LICENSE",

"privacyPolicyUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/master/PRIVACY.md",

Bash(bash ${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/check-deps.sh), Bash(bash ${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/decompile.sh *), Read, Glob, Grep

The install script auto-detects the OS and installs without sudo when possible (user-local install to `~/.local/`). If sudo is needed, it will prompt — if the user declines or sudo is unavailable, the script prints exact manual instructions

- Installs without sudo when possible (downloads to `~/.local/share/`, symlinks in `~/.local/bin/`)

- Uses sudo and the system package manager when necessary (apt, dnf, pacman)

- If sudo is needed but unavailable or the user declines, it prints the exact manual command and exits with code 2 — show these instructions to the user

- **Source**: `com.example.api.ApiService` (ApiService.java:42) - **Base URL**: `https://api.example.com/v1`

- **Base URL**: `https://api.example.com/v1`

Ktor's authentication plugin uses the [`Auth { bearer { loadTokens { ... }; refreshTokens { ... } } }`](https://ktor.io/docs/auth.html)

[`Auth { bearer { loadTokens { ... }; refreshTokens { ... } } }`](https://ktor.io/docs/auth.html)

- **Source**: `com.example.app.api.ApiService` (file:line) - **Base URL**: `https://api.example.com/v1`

- **Base URL**: `https://api.example.com/v1`

- **Full URL**: `https://api.example.com/v1/path/to/endpoint`

[Credential-related source omitted]

[Credential-related source omitted]

Fernflower is the JetBrains analytical Java decompiler. [Vineflower](https://github.com/Vineflower/vineflower) is the actively maintained community fork with better output quality and published releases. They share the same CLI interface.

sudo apt update

sudo apt install openjdk-17-jdk

sudo dnf install java-17-openjdk-devel

sudo pacman -S jdk17-openjdk

1. Go to <https://github.com/skylot/jadx/releases/latest> 2. Download the `jadx-<version>.zip` file (not the source archive)

git clone https://github.com/skylot/jadx.git

Fernflower is the JetBrains Java decompiler. It produces better output than jadx on complex Java constructs, lambdas, and generics. [Vineflower](https://github.com/Vineflower/vineflower) is the actively maintained community fork with publis

1. Go to <https://github.com/Vineflower/vineflower/releases/latest> 2. Download `vineflower-<version>.jar`

git clone https://github.com/JetBrains/fernflower.git

1. Go to <https://github.com/ThexXTURBOXx/dex2jar/releases/latest> 2. Download and extract:

sudo apt install apktool

# Manual: https://apktool.org/docs/install

sudo apt install adb

Executable file

#!/usr/bin/env bash

Executable file

#!/usr/bin/env bash

rm -rf "$XAPK_EXTRACTED_DIR"

rm -f "$result_jar"

rm -f "$converted_jar"

rm -rf "$XAPK_EXTRACTED_DIR"

Executable file

[Credential-related source omitted]

if ($searchAll -or $Urls) {     Write-Section "Hardcoded URLs (http:// and https://)"

Write-Section "Hardcoded URLs (http:// and https://)"

#!/usr/bin/env bash

[Credential-related source omitted]

#     '/path' — keeps internal hosts (localhost, internal-backend)  svc/health   #     while still dropping Kotlin-stdlib dictionary fragments like   #     "http://An Introduction..." (bare word, no port/path follows).

#     "http://An Introduction..." (bare word, no port/path follows).

trap 'rm -f "$TMP"' EXIT

#                                              keeps "mytrackera-api.com")   # Trade-off: a first-party host referenced bare with an uncommon TLD (e.g.   # https://foo.store with no path) is dropped — give it a path/port, or add the

# Trade-off: a first-party host referenced bare with an uncommon TLD (e.g.   # https://foo.store with no path) is dropped — give it a path/port, or add the   # TLD to the list below, if you hit that case.

# https://foo.store with no path) is dropped — give it a path/port, or add the

rm -f "$HOSTS_TMP" "$TMP"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

echo "  Java code is just the RN host. Real app logic is in JS/Hermes:"     echo "    - if Hermes: hbctool disasm assets/index.android.bundle"     echo "    - if JSC:    js-beautify the bundle and grep for 'fetch('/'axios'"

echo "    - if Hermes: hbctool disasm assets/index.android.bundle"     echo "    - if JSC:    js-beautify the bundle and grep for 'fetch('/'axios'"     ;;

echo "    - if JSC:    js-beautify the bundle and grep for 'fetch('/'axios'"

Executable file

function Get-GHLatestTag {     param([string]$Repo)     $url = "https://api.github.com/repos/$Repo/releases/latest"

param([string]$Repo)     $url = "https://api.github.com/repos/$Repo/releases/latest"     [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$url = "https://api.github.com/repos/$Repo/releases/latest"

choco install openjdk17 -y     } else {         Write-Manual "Install Java JDK 17+ from https://adoptium.net/"

} else {         Write-Manual "Install Java JDK 17+ from https://adoptium.net/"     }

Write-Manual "Install Java JDK 17+ from https://adoptium.net/"

if (-not $tag) {         Write-Fail "Could not determine latest jadx version."         Write-Manual "Download from https://github.com/skylot/jadx/releases/latest"

Write-Fail "Could not determine latest jadx version."         Write-Manual "Download from https://github.com/skylot/jadx/releases/latest"     }

Write-Manual "Download from https://github.com/skylot/jadx/releases/latest"

$version = $tag -replace '^v', ''     $url = "https://github.com/skylot/jadx/releases/download/$tag/jadx-$version.zip"

$url = "https://github.com/skylot/jadx/releases/download/$tag/jadx-$version.zip"

if (-not $tag) {         Write-Fail "Could not determine latest Vineflower version."         Write-Manual "Download from https://github.com/Vineflower/vineflower/releases/latest"

Write-Fail "Could not determine latest Vineflower version."         Write-Manual "Download from https://github.com/Vineflower/vineflower/releases/latest"     }

Write-Manual "Download from https://github.com/Vineflower/vineflower/releases/latest"

$version = $tag -replace '^v', ''     $url = "https://github.com/Vineflower/vineflower/releases/download/$tag/vineflower-$version.jar"

$url = "https://github.com/Vineflower/vineflower/releases/download/$tag/vineflower-$version.jar"

$version = $tag -replace '^v', ''     $url = "https://github.com/ThexXTURBOXx/dex2jar/releases/download/$tag/dex-tools-$version.zip"

$url = "https://github.com/ThexXTURBOXx/dex2jar/releases/download/$tag/dex-tools-$version.zip"

$url = "https://github.com/ThexXTURBOXx/dex2jar/releases/download/$tag/dex-tools-v$version.zip"

} catch {             Write-Fail "Download failed."             Write-Manual "Download from https://github.com/ThexXTURBOXx/dex2jar/releases/latest"

Write-Fail "Download failed."             Write-Manual "Download from https://github.com/ThexXTURBOXx/dex2jar/releases/latest"         }

Write-Manual "Download from https://github.com/ThexXTURBOXx/dex2jar/releases/latest"

if (-not $d2jBat) {         Write-Fail "Could not find d2j-dex2jar in extracted archive."         Write-Manual "Download and extract manually from https://github.com/ThexXTURBOXx/dex2jar/releases"

Write-Fail "Could not find d2j-dex2jar in extracted archive."         Write-Manual "Download and extract manually from https://github.com/ThexXTURBOXx/dex2jar/releases"     }

Write-Manual "Download and extract manually from https://github.com/ThexXTURBOXx/dex2jar/releases"

choco install apktool -y     } else {         Write-Manual "Install apktool from https://apktool.org/docs/install"

} else {         Write-Manual "Install apktool from https://apktool.org/docs/install"     }

Write-Manual "Install apktool from https://apktool.org/docs/install"

winget install Google.PlatformTools --accept-source-agreements --accept-package-agreements     } else {         Write-Manual "Install Android SDK Platform Tools from https://developer.android.com/tools/releases/platform-tools"

} else {         Write-Manual "Install Android SDK Platform Tools from https://developer.android.com/tools/releases/platform-tools"     }

Write-Manual "Install Android SDK Platform Tools from https://developer.android.com/tools/releases/platform-tools"

#!/usr/bin/env bash

#   2 — requires manual action (e.g. sudo needed but not available)

- Uses sudo if available and needed

# Check sudo availability

if command -v sudo &>/dev/null; then

if sudo -n true 2>/dev/null; then

# sudo exists but may need password — we'll try it and let it prompt

# --- Helper: install via system package manager (needs sudo on Linux) ---

sudo apt-get update -qq && sudo apt-get install -y -qq "$pkg"

manual "Run: sudo apt-get install $pkg"

sudo dnf install -y "$pkg"

manual "Run: sudo dnf install $pkg"

sudo pacman -S --noconfirm "$pkg"

manual "Run: sudo pacman -S $pkg"

download() {   local url="$1" dest="$2"   if command -v curl &>/dev/null; then

local url="$1" dest="$2"   if command -v curl &>/dev/null; then     curl -fsSL -o "$dest" "$url"

if command -v curl &>/dev/null; then

curl -fsSL -o "$dest" "$url"

elif command -v wget &>/dev/null; then

wget -q -O "$dest" "$url"

else     fail "Neither curl nor wget available."     return 1

fail "Neither curl nor wget available."

gh_latest_tag() {   local repo="$1"   local url="https://api.github.com/repos/$repo/releases/latest"

local repo="$1"   local url="https://api.github.com/repos/$repo/releases/latest"   if command -v curl &>/dev/null; then

local url="https://api.github.com/repos/$repo/releases/latest"   if command -v curl &>/dev/null; then     curl -fsSL "$url" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name":[[:space:]]*"\([^"]*\)".*/\1/'

if command -v curl &>/dev/null; then

curl -fsSL "$url" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name":[[:space:]]*"\([^"]*\)".*/\1/'

elif command -v wget &>/dev/null; then

wget -q -O - "$url" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name":[[:space:]]*"\([^"]*\)".*/\1/'

dnf)     pkg_install "java-17-openjdk-devel" ;;     pacman)  pkg_install "jdk17-openjdk" ;;     *)       manual "Install Java JDK 17+ from https://adoptium.net/" ;;

pacman)  pkg_install "jdk17-openjdk" ;;     *)       manual "Install Java JDK 17+ from https://adoptium.net/" ;;   esac

*)       manual "Install Java JDK 17+ from https://adoptium.net/" ;;

# User-local install from GitHub releases (no sudo needed)

if [[ -z "$tag" ]]; then     fail "Could not determine latest jadx version."     manual "Download from https://github.com/skylot/jadx/releases/latest"

fail "Could not determine latest jadx version."     manual "Download from https://github.com/skylot/jadx/releases/latest"   fi

manual "Download from https://github.com/skylot/jadx/releases/latest"

local version="${tag#v}"   local url="https://github.com/skylot/jadx/releases/download/${tag}/jadx-${version}.zip"

local url="https://github.com/skylot/jadx/releases/download/${tag}/jadx-${version}.zip"

rm -rf "$install_dir"

rm -f "$tmp_zip"

# Download JAR from GitHub releases (no sudo needed)

if [[ -z "$tag" ]]; then     fail "Could not determine latest Vineflower version."     manual "Download from https://github.com/Vineflower/vineflower/releases/latest"

fail "Could not determine latest Vineflower version."     manual "Download from https://github.com/Vineflower/vineflower/releases/latest"   fi

manual "Download from https://github.com/Vineflower/vineflower/releases/latest"

local version="${tag#v}"   local url="https://github.com/Vineflower/vineflower/releases/download/${tag}/vineflower-${version}.jar"

local url="https://github.com/Vineflower/vineflower/releases/download/${tag}/vineflower-${version}.jar"

# Download from GitHub (no sudo needed)

local version="${tag#v}"   local url="https://github.com/ThexXTURBOXx/dex2jar/releases/download/${tag}/dex-tools-${version}.zip"

local url="https://github.com/ThexXTURBOXx/dex2jar/releases/download/${tag}/dex-tools-${version}.zip"

url="https://github.com/ThexXTURBOXx/dex2jar/releases/download/${tag}/dex-tools-v${version}.zip"

download "$url" "$tmp_zip" || {

fail "Download failed."       manual "Download from https://github.com/ThexXTURBOXx/dex2jar/releases/latest"     }

manual "Download from https://github.com/ThexXTURBOXx/dex2jar/releases/latest"

rm -rf "$install_dir"

rm -f "$tmp_zip"

if [[ -z "$bin_dir" ]]; then     fail "Could not find d2j-dex2jar.sh in extracted archive."     manual "Download and extract manually from https://github.com/ThexXTURBOXx/dex2jar/releases"

fail "Could not find d2j-dex2jar.sh in extracted archive."     manual "Download and extract manually from https://github.com/ThexXTURBOXx/dex2jar/releases"   fi

manual "Download and extract manually from https://github.com/ThexXTURBOXx/dex2jar/releases"

brew)    info "Installing apktool via Homebrew..."; brew install apktool ;;     apt)     pkg_install "apktool" ;;     *)       manual "Install apktool from https://apktool.org/docs/install" ;;

apt)     pkg_install "apktool" ;;     *)       manual "Install apktool from https://apktool.org/docs/install" ;;   esac

*)       manual "Install apktool from https://apktool.org/docs/install" ;;

dnf)     pkg_install "android-tools" ;;     pacman)  pkg_install "android-tools" ;;     *)       manual "Install Android SDK Platform Tools from https://developer.android.com/tools/releases/platform-tools" ;;

pacman)  pkg_install "android-tools" ;;     *)       manual "Install Android SDK Platform Tools from https://developer.android.com/tools/releases/platform-tools" ;;   esac

*)       manual "Install Android SDK Platform Tools from https://developer.android.com/tools/releases/platform-tools" ;;

#!/usr/bin/env bash

#!/usr/bin/env bash