Decompile Android APK, XAPK, AAB, DEX, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints (Retrofit, OkHttp, Volley, GraphQL, WebSocket), trace call flows from UI to network layer, analyze security patterns (cert pinning, exposed secrets, Android Fragment Injection via exported PreferenceActivity), perform dynamic analysis with Frida (adaptive bypass generation, crash analysis, runtime hooking), and — only when the decompiled app contains Google API keys or Firebase configuration — run a conditional Firebase & Google API testing phase (Auth, Realtime DB, Firestore, Remote Config, Storage, Dynamic Links, FCM, Gemini, Maps). Use when the user wants to decompile, analyze, or reverse engineer Android packages, find API endpoints, follow call flows, audit app security, bypass runtime protections, test exposed Google/Firebase credentials, or check for Fragment Injection exposure.
How to install android-reverse-engineering?
incogbyte/android-reverse-engineering-claude-skill/android-reverse-engineering
$npx -y skills add incogbyte/android-reverse-engineering-claude-skill --skill android-reverse-engineeringInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/incogbyte/android-reverse-engineering-claude-skill" --skill "incogbyte/android-reverse-engineering-claude-skill/android-reverse-engineering"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/incogbyte/android-reverse-engineering-claude-skill" that are relevant to the current task. Run `npx skills add "https://github.com/incogbyte/android-reverse-engineering-claude-skill"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.Jul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks.Jul 2026
- entra-agent-idProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token…Jul 2026
- firebase-security-rules-auditorAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource…Jul 2026
- golang-securitySecurity best practices and vulnerability prevention for Golang.Jul 2026
- gws-modelarmorGoogle Model Armor: Filter user-generated content for safety.Jul 2026
