Open-source agent skill · MIT licensed

Android binaries,
mapped with intent.

APKDecomp gives coding agents a disciplined route through APKs, bundles, DEX, resources, native libraries, and protected builds—without pretending one decompiler fits every target.

$ git clone https://github.com/havaianasdestruido/apkdecomp-skill.git
target_intake.log AUTHORIZED LAB
❯ apkid sample.apk

01packagecom.example.sample

02compilerKotlin / R8

03payloadDEX + arm64 JNI

04routestatic → native cross-check

ROUTES WORK THROUGH
  • apktool
  • jadx
  • apkid
  • Ghidra
  • Frida
  • bundletool

01 / THE METHOD

A workflow, not a
magic button.

Decompiler output is a hypothesis. The skill starts with evidence, chooses the layer that actually contains the app, and tells the agent when to cross-check.

01

Fingerprint before choosing

App era, compiler, splits, obfuscation, and framework determine the toolchain. The skill makes that decision explicit.

classesN.dexlib/*.soassets/resources.arsc
02

Inspect the right layer

DEX for Kotlin/Java. Native artifacts for Flutter or IL2CPP. Embedded bundles for React Native.

03

Cross-check, then report

When source output looks wrong, compare engines and return to smali—the closest static ground truth.

03 / OPERATING BOUNDARY

Careful by design.

Reverse engineering is dual-use. The skill keeps authorization visible and refuses workflows aimed at piracy, DRM bypass, or unauthorized tampering.

Read the responsible-use policy
  • ✓
    Authorized targetsYour own applications, explicit assessments, controlled research.
  • ✓
    Incremental findingsSurface structure early; investigate only what the task needs.
  • ✓
    Evidence over confidenceCall out uncertain decompiler output and verify critical logic.

READY TO TRACE THE RIGHT PATH?

Start with the package.
Keep the reasoning.

Explore the documentation Read SKILL.md