
Agent skill for Android APK reverse engineering: dex patching, unpacking, repacking, ad and paywall removal, native .so analysis, and runtime instrumentation with Frida.
English · 简体中文
Capabilities · Structure · Install · Requirements · Failure catalogue · Scope · Maintenance · Disclaimer
An Agent Skill for Android APK reverse engineering, debloating, ad removal, surgical dex patching, repacking, and runtime/server analysis.
It is a skill, not a tutorial: it is written to be loaded by an agent (Claude Code,
Codex, or any harness that supports the Agent Skills format) while it works, so it is
organized for progressive disclosure — a short decision-oriented SKILL.md, detailed
references loaded only when a step needs them, and parameterized scripts you can run
directly.
SKILL.md is deliberately written as a procedure with gates rather than as advice, because the
observed failure mode is not ignorance — it is a model reading the whole thing, agreeing with it, and
then reasoning from first principles anyway.
So there are four things in the body that are meant to be acted on, not read:
And one thing at the end that is meant to be withheld: "done" has a definition (six items). A clean log is not one of them. Anything short of all six is a checkpoint, and should be reported as a checkpoint with what remains.
If you are an agent reading this: the cheapest possible first command is
python skills/apk-reverse/scripts/doctor.py. It tells you which of these tools exist here, which
scripts can actually run, and whether something in the environment is already poisoning your
measurements.