How do I install the Android Reverse Engineering skill?

Run npx skillmds@latest add gmh5225/android-reverse-engineering in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Android Reverse Engineering safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Android Reverse Engineering?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Android Reverse Engineering free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Android Reverse Engineering?

gmh5225 (@gmh5225) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Android Reverse Engineering by gmh5225

Name: Android Reverse Engineering
Author: gmh5225

File contents

Android Reverse Engineering & API Extraction

This skill provides a structured workflow to:

decompile Android artifacts (APK/XAPK/JAR/AAR)
trace call flows from entry points to network layers
extract and document HTTP APIs (Retrofit endpoints, OkHttp calls, hardcoded URLs, auth patterns)

Prerequisites

Java JDK 17+
jadx (CLI)
Optional (recommended): Vineflower/Fernflower, dex2jar

Workflow (high-level)

Decompile
- Use jadx first for a broad pass (resources + sources)
- Use Fernflower/Vineflower for better Java output on tricky code; compare when needed
Analyze structure
- Identify launcher Activity, Application class, and DI setup
- Map packages: api, network, data, repository, service, retrofit, http
Trace call flows
- UI entry point → ViewModel/Presenter → Repository → API service → HTTP client call
Extract APIs
- Retrofit: interface annotations (@GET, @POST, …)
- OkHttp: Request.Builder, HttpUrl, interceptors
- URLs: string literals (http://, https://) and base URL builders
Document endpoints

Use this template for each endpoint you discover:

### `METHOD /path`

- **Source**: `com.example.api.ApiService` (ApiService.java:42)
- **Base URL**: `https://api.example.com/v1`
- **Path params**: `id` (String)
- **Query params**: `page` (int), `limit` (int)
- **Headers**: `Authorization: Bearer <token>`
- **Request body**: `{ "email": "string", "password": "string" }`
- **Response**: `ApiResponse<User>`
- **Called from**: `LoginActivity → LoginViewModel → UserRepository → ApiService`

Notes

This repository also ships a Claude Code plugin implementation (scripts, references, and the /decompile slash command) under:

plugins/android-reverse-engineering/

---name: android-reverse-engineeringdescription: Decompile Android APK/XAPK/JAR/AAR files and extract/document HTTP APIs (Retrofit/OkHttp/URLs) with a repeatable workflow.---# Android Reverse Engineering & API ExtractionThis skill provides a structured workflow to:- decompile Android artifacts (APK/XAPK/JAR/AAR)- trace call flows from entry points to network layers- extract and document HTTP APIs (Retrofit endpoints, OkHttp calls, hardcoded URLs, auth patterns)## Prerequisites- Java JDK 17+- `jadx` (CLI)- Optional (recommended): Vineflower/Fernflower, dex2jar## Workflow (high-level)1. **Decompile** - Use `jadx` first for a broad pass (resources + sources) - Use Fernflower/Vineflower for better Java output on tricky code; compare when needed2. **Analyze structure** - Identify launcher Activity, Application class, and DI setup - Map packages: `api`, `network`, `data`, `repository`, `service`, `retrofit`, `http`3. **Trace call flows** - UI entry point → ViewModel/Presenter → Repository → API service → HTTP client call4. **Extract APIs** - Retrofit: interface annotations (`@GET`, `@POST`, …) - OkHttp: `Request.Builder`, `HttpUrl`, interceptors - URLs: string literals (`http://`, `https://`) and base URL builders5. **Document endpoints**Use this template for each endpoint you discover:```markdown### `METHOD /path`- **Source**: `com.example.api.ApiService` (ApiService.java:42)- **Base URL**: `https://api.example.com/v1`- **Path params**: `id` (String)- **Query params**: `page` (int), `limit` (int)- **Headers**: `Authorization: Bearer <token>`- **Request body**: `{ "email": "string", "password": "string" }`- **Response**: `ApiResponse<User>`- **Called from**: `LoginActivity → LoginViewModel → UserRepository → ApiService````## NotesThis repository also ships a **Claude Code plugin** implementation (scripts, references, and the `/decompile` slash command) under:- `plugins/android-reverse-engineering/`

Frequently asked questions

Android Reverse Engineering