mirror of https://github.com/Heretek-AI/Android-RE.git synced 2026-07-19 20:43:32 -04:00

Files

T

John Smith fb74beb6f4 Initial import: Android-RE monorepo

Fresh re-import of the project. The prior history of the
Heretek-AI/Android-RE repository was rebuilt from a single squashed
initial commit per the project's vendor-neutrality policy (see
CLAUDE.md for the policy and translation table).

The audit trail for the rebuild is preserved at
/tmp/sanitize/pre-destroy/ on the analyst host. The redaction spec
is at /tmp/sanitize/redacts.json; the audit decision log is at
/tmp/sanitize/audit-decision.md.

2026-06-05 13:51:51 -04:00

2.0 KiB

Raw Permalink Blame History

Skills

Claude Code skills are markdown recipes that compose MCP tools. Each skill lives in skills/<name>/SKILL.md and is symlinked into ~/.claude/skills/<name>/ by bin/install.sh.

Trigger phrases

Each SKILL.md declares trigger phrases in its frontmatter description. Examples:

"Use when the user wants to triage an APK, perform a static analysis overview, or generate a MASVS-aligned report."

The agent uses these triggers to decide which skill to load. A skill typically asks the user one or two clarifying questions, then walks through the workflow.

Phase 1 skills

android-re-static-triage — 5-minute static overview.
android-re-decompile — Pull pseudocode/smali for specific methods.
android-re-masvs-report — Single MASVS-aligned report (stub in Phase 1).

Phase 2 skills

android-re-native-triage — Assess native library hardening.
android-re-secrets-scan — Deep secrets & risk findings.
android-re-repackage — Modify + repackage APK for testing.
android-re-gradle-rebuild — Turn an APK into a buildable Gradle project (uses jadx_cleanup_workdir and create_gradle_project to apply the post-decompile cleanup pipeline to large modern Kotlin/Compose APKs).

Phase 3 skills

android-re-dynamic-hook — Hook a method, observe behavior.
android-re-sslpinning-bypass — Bypass SSL pinning on a target app.
android-re-frida-script-author — Generate Frida scripts with helper templates.

Phase 4 skills

android-re-triage-orchestrator — Master skill: drop in APK → MASVS report.
android-re-network-intercept — Capture HTTPS from app.

Authoring a new skill

See Skill Authoring. The minimum is a SKILL.md with:

---
name: <skill-name>
description: <trigger phrases>
---

# Title

## When to use
## Inputs (with confirm gates)
## Workflow
## Output
## Examples

references/ and scripts/ subdirectories may be added to keep long-form material out of the main file.

2.0 KiB Raw Permalink Blame History