#shell

This Claude Code skill decompiles Android APK, XAPK, JAR, and AAR files to extract HTTP APIs like Retrofit endpoints, OkHttp calls, hardcoded URLs, and auth patterns, plus traces call flows and analyzes obfuscated code. Install via GitHub in Claude Code with simple commands, then use "/decompile app.apk" or natural phrases. It benefits you by letting you document and reproduce app APIs without source code, speeding up security research, malware analysis, or interoperability testing legally.

https://github.com/SimoneAvogadro/android-reverse-engineering-skill