• Picks
  • Discover
  • Alternatives
  • About

© 2026 Willet

  • Newsletter
  • About
  • FAQ
  • Terms
  • Privacy & Cookies
Join the Discord (opens in a new tab)
Simone Avogadro avatar

Android Reverse Engineering Skill

Claude Code skill for decompiling Android apps and extracting their APIs

  • Agent skills and plugins
  • Security testing and OSINT
View on GitHub

What it is

A Claude Code plugin whose shell and PowerShell scripts run jadx or Fernflower/Vineflower over APK, XAPK, JAR and AAR packages, then extract HTTP endpoints, hardcoded URLs, auth headers and request-signing schemes from Retrofit, OkHttp, Ktor, Apollo and similar stacks. It can fingerprint an app's framework and obfuscation before decompiling, trace call flows from activities down to network calls, and rebuild original Kotlin class names from R8-obfuscated code using leftover metadata. Security researchers and developers documenting undocumented app backends can drive it through natural-language requests or run the scripts on their own.

Images

Facts

Stars
8,231 GitHub stars.
8,231

Forks
928
Commits
37
Contributors
8
Language
Shell
License
Apache-2.0
Last commit
Oct 11, 2026
On GitHub since
February 2026
First release
April 2026
Platforms
macOS, Windows, Linux, CLI
Self-hostable
No
Author
Simone Avogadro
Tags
  • agent-skills
  • penetration-testing
  • reverse-engineering
  • agent-plugins

Last synced from GitHub on Oct 20, 2026

The 10 best overlooked open-source projects, every Monday.

Share and more

Comments

No comments yet. Start the conversation.