GithubStar/android-reverse-engineering-skill
1
0
Fork 0
mirror of https://github.com/SimoneAvogadro/android-reverse-engineering-skill.git synced 2026-10-17 04:40:30 +08:00
Code Issues Packages Projects Releases Wiki Activity

chore: address marketplace policy holds

Browse Source 
- /decompile: pre-approve only check-deps.sh and decompile.sh instead of a
  scripts/* wildcard; install-dep.sh now asks the user each time
- find-api-calls.ps1: rename -Auth switch to -AuthPatterns (matches the .sh
  rename; -Auth still works via PowerShell parameter-prefix matching)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DcUE1A6iyBfWDmpdR5JzNF
This commit is contained in:
Simone Avogadro
2026-10-11 19:14:44 +02:00
parent 78bd5ca926
commit 9ac132bfd9
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/android-reverse-engineering/commands/decompile.md
+1 -1
View File
@@ -1,5 +1,5 @@
---
allowed-tools: Bash(bash ${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/*), Read, Glob, Grep
allowed-tools: Bash(bash ${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/check-deps.sh), Bash(bash ${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/decompile.sh *), Read, Glob, Grep
description: Decompile an Android APK/XAPK/JAR/AAR and analyze its structure
user-invocable: true
argument-hint: <path to APK, XAPK, JAR, or AAR file>
plugins/android-reverse-engineering/skills/android-reverse-engineering/SKILL.md
+1 -1
View File
@@ -246,7 +246,7 @@ On Windows (PowerShell):
& "${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/find-api-calls.ps1" <output>/sources/ -Urls
# Only auth patterns
& "${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/find-api-calls.ps1" <output>/sources/ -Auth
& "${CLAUDE_PLUGIN_ROOT}/skills/android-reverse-engineering/scripts/find-api-calls.ps1" <output>/sources/ -AuthPatterns
```
Document the endpoints in **two tiers** — going deep on every endpoint is
plugins/android-reverse-engineering/skills/android-reverse-engineering/scripts/find-api-calls.ps1
+5 -5
View File
@@ -2,7 +2,7 @@
# NOTE FOR REVIEWERS: this script only greps the *decompiled sources passed as <source-dir>*
# for strings such as "api_key", "bearer" or "authorization" and for http(s):// URLs.
# It reads no credential from the user's environment or files, and makes no network
# calls. The --auth option (-Auth) is just a search-section selector.
# calls. The -AuthPatterns switch is just a search-section selector.
param(
[Parameter(Position=0)]
[string]$SourceDir,
@@ -10,7 +10,7 @@ param(
[switch]$OkHttp,
[switch]$Volley,
[switch]$Urls,
[switch]$Auth,
[switch]$AuthPatterns,
[switch]$All,
[Alias('h')]
[switch]$Help
@@ -32,7 +32,7 @@ Options:
-OkHttp Search only for OkHttp patterns
-Volley Search only for Volley patterns
-Urls Search only for hardcoded URLs
-Auth Search only for auth-related patterns
-AuthPatterns Search only for auth-related patterns
-All Search all patterns (default)
-Help Show this help message
@@ -55,7 +55,7 @@ if (-not (Test-Path $SourceDir)) {
}
# Default to all if no specific flag set
$searchAll = (-not $Retrofit -and -not $OkHttp -and -not $Volley -and -not $Urls -and -not $Auth) -or $All
$searchAll = (-not $Retrofit -and -not $OkHttp -and -not $Volley -and -not $Urls -and -not $AuthPatterns) -or $All
function Write-Section {
param([string]$Title)
@@ -113,7 +113,7 @@ if ($searchAll -or $Urls) {
}
# --- Auth patterns ---
if ($searchAll -or $Auth) {
if ($searchAll -or $AuthPatterns) {
Write-Section "Authentication & API Keys"
Search-Sources '(?i)(api[_\-]?key|auth[_\-]?token|bearer|authorization|x-api-key|client[_\-]?secret|access[_\-]?token)'