Android Reverse Engineering & API Extraction is a Claude Code skill that decompiles Android APK, XAPK, JAR, and AAR files to extract HTTP APIs and recover obfuscated class names.
The skill addresses the challenge of understanding Android apps without source code by automating decompilation and API extraction. It uses jadx as its primary decompiler and optionally integrates Vineflower or Fernflower for improved output on complex code. A distinctive feature is its handling of modern Android development: it recovers original Kotlin class names from R8-obfuscated binaries by leveraging Kotlin metadata that obfuscation cannot strip, and it extracts APIs not only from the classic Retrofit and OkHttp stack but also from contemporary frameworks like Ktor, Apollo for GraphQL, and Koin dependency injection. The skill performs triage before full decompilation, detecting the app framework, HTTP stack, obfuscation level, and native libraries in seconds to help prioritize analysis effort.
Developers analyzing Android apps for security research, API documentation, or reverse engineering should consider this skill if they work with modern Kotlin-based applications or need to handle obfuscated binaries. It suits projects where understanding API contracts and call flows is essential but source code is unavailable. The tool is particularly valuable for apps using contemporary Kotlin/KMP stacks rather than legacy Java patterns. Installation is straightforward within Claude Code, and the skill activates on natural language prompts related to Android analysis.
The project maintains both bash and PowerShell implementations, with the PowerShell scripts being a recent community contribution still undergoing stabilization. Development activity includes ongoing refinement of the Windows support path and continued expansion of framework detection and API extraction capabilities across evolving Android technology stacks.
