Android Reverse Engineering & API Extraction — Claude Code skill

A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them without the original source code.

First-class Kotlin support: modern Android apps are Kotlin/KMP, heavily obfuscated with R8. This skill recovers the original Kotlin class names from metadata R8 cannot strip, and extracts APIs from Ktor, Apollo (GraphQL) and Koin — not just the classic Retrofit/OkHttp stack.

Windows / PowerShell support (experimental): The *.ps1 scripts alongside the bash ones are a recent community contribution, still being stabilised.

Requirements: Java JDK 17+ and jadx (CLI). Optional (recommended): Vineflower or Fernflower, and dex2jar.

Installation: Inside Claude Code, run `/plugin marketplace add SimoneAvogadro/android-reverse-engineering-skill` and `/plugin install android-reverse-engineering@android-reverse-engineering-skill`. From a local clone, use `git clone https://github.com/SimoneAvogadro/android-reverse-engineering-skill.git`.