Skip to content
Get packs

APK Reverse Engineering

Guides an agent through decompiling, patching, repacking and Frida-hooking Android APKs from the CLI.

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
8 files

What it does

When installed, the agent follows a structured workflow for analysing Android apps: it decompiles Java code with jadx, unpacks resources and smali with apktool, looks at the manifest and native .so libraries, and can hook running apps with Frida. It can also rebuild, sign and install a modified APK via bundled shell scripts. It is written for people already doing authorised reverse engineering.

Great for

  • Security researchers analysing an Android app they are authorised to test
  • Mobile developers debugging their own app's login, SSL pinning or root-detection logic
  • Reverse engineers who already use jadx, apktool and Frida and want a consistent procedure

Skip it if

  • Analysing apps you do not own or have permission to test, since patching and hooking third-party apps can break law or terms of service
  • Bypassing licensing, DRM or anti-cheat protections, which the skill's workflow is oriented toward
  • Users who are new to Android tooling, because it assumes the CLI tools are already installed and configured

Try asking

  • “Decompile this APK with jadx and summarise the login flow in LoginActivity”
  • “Unpack the APK with apktool and list the exported activities and permissions in the manifest”
  • “Write a Frida script to log arguments to the certificate pinning check on my test app”
  • “Rebuild my patched apktool output, sign it and install it on the emulator at 127.0.0.1:7555”
Step-by-step guide: how to use APK Reverse EngineeringInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 8 original files, the MIT licence and an attribution note.

    apk-reverse.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip apk-reverse.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip apk-reverse.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Point the agent at an APK you are authorised to test and state the scope up front, since the skill itself requires authorised devices for dynamic analysis.
  • Review the bundled scripts before running them; they execute shell commands, and the bootstrap logic may download tools from GitHub when something is missing.
  • Use a dedicated test device or emulator rather than a personal phone when installing modified or Frida-instrumented APKs.

What's inside

  • references/android-advanced.md
  • references/apk-security-checklist.md
  • references/frida-bypass-kit.md
  • references/frida-cookbook.md
  • scripts/decode.sh
  • scripts/frida-run.sh
  • scripts/rebuild-sign-install.sh
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.