Simone Avogadro
990aed0614
PRIVACY.md documents that the plugin collects nothing, processes files locally, reads no credentials, and only makes network requests to download dependencies via install-dep. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01DcUE1A6iyBfWDmpdR5JzNF
1.7 KiB
Privacy Policy
Last updated: 2026-10-11
The android-reverse-engineering plugin for Claude Code is an open-source set of instructions and local scripts. It does not include any server, account, or telemetry operated by the author.
Data the plugin collects
None. The plugin does not collect, store, or transmit personal data, usage statistics, or the files you analyze.
Local processing
APK, XAPK, JAR, and AAR files are decompiled and searched entirely on your machine with locally installed tools (jadx, Vineflower/Fernflower, dex2jar). Output is written to a directory on your machine and nowhere else.
The scripts do not read credentials, tokens, or API keys from your environment or files. The "auth" search options only scan the decompiled source you point them at for authentication-related strings.
Network access
The only network requests the plugin's scripts make are dependency downloads,
and only when you run install-dep.sh / install-dep.ps1:
- release metadata and archives from GitHub (
api.github.com,github.com) for jadx, Vineflower, and dex2jar; - your system package manager (for example Homebrew, apt, winget, scoop, or Chocolatey) when installing Java or jadx.
These requests go directly to those services and are subject to their own privacy policies. No data about you or your analyzed files is included.
Claude
Like any Claude Code plugin, the content Claude reads while using this plugin (for example decompiled source) is processed by Claude under Anthropic's terms and privacy policy, not by the plugin author.
Contact
Questions or concerns: open an issue at https://github.com/SimoneAvogadro/android-reverse-engineering-skill/issues