heretek-re/android-re
12 skills
$npx skills add heretek-re/android-reSkillInstalls
android-re-decompileUse when the user wants to read the implementation of a specific method or class, pull Java/smali source for a function, or understand what a particular entry…android-re-dynamic-hookUse when the user wants to hook a method at runtime on a connected Android device, observe arguments/return values, trace execution, or dump runtime state.android-re-frida-script-authorUse when the user wants to write a custom Frida script (not just a one-off hook) and needs help authoring it.android-re-gradle-rebuildTurn an APK into a buildable Gradle project. Composes mcp__android-re-static__open_project, decompile_apk, decode_apk, jadx_cleanup_workdir, and…android-re-masvs-reportUse when the user asks for a MASVS-aligned report, an OWASP MASTG audit, or a formal "is this app secure" assessment.android-re-native-triageUse when the user wants to assess the native (JNI / C / C++) code inside an APK, audit hardening on .so libraries, or get a report on what a native library…android-re-network-interceptUse when the user wants to capture and inspect an app's network traffic end-to-end.android-re-repackageUse when the user wants to modify an APK and produce a new signed build.android-re-secrets-scanUse when the user wants to find hard-coded secrets in an APK: API keys, AWS / GCP / Azure credentials, JWTs, private keys, hard- coded URLs, IP addresses, or…android-re-sslpinning-bypassUse when the user wants to bypass SSL/TLS certificate pinning on a running app to intercept HTTPS traffic (e.g. with Burp or mitmproxy).android-re-static-triageUse when the user wants to triage an APK, perform a 5-minute static overview, or get a high-level "what does this app do" summary without running it.android-re-triage-orchestratorUse when the user wants the full triage workflow: drop in an APK, run a MASVS-aligned multi-step analysis, and produce a report.