安卓原生

Scan Android APKs for Firebase misconfigs — open databases, storage buckets, auth bypass, exposed cloud functions. Use for Firebase vulns, mobile audits, google-services.json, firebaseio.com URLs, AIza API keys in decompiled APK.

Fully automatic APK acquisition for Android reversing. Given a package name, it obtains the APK through the first route that works — pull from a connected adb device, use a local file, or download from APKPure's direct-link endpoint (XAPK with splits or single APK) — then optionally installs it back to a device and verifies the package name. This is Phase 0 (Intake) of the auto_reverse orchestrator: it answers "I don't have the APK yet, get it for me" without manual confirmation. Trigger terms: get the apk, download apk, acquire apk, pull apk, automatic apk acquisition, download apk, install apk, app not installed / not available locally.

Use for Android APK reverse engineering where the workflow specifically requires apktool (manifest, smali, resources, repackaging), jadx (DEX → Java/Kotlin decompilation with deobfuscation), or IDA Pro on bundled native .so libraries. The trip-ups this skill closes: deciding when JNI native libs hold the real logic vs. Java, the apktool→jadx sequencing, Java↔native function-name mapping (`Java_com_pkg_Class_method`), and packer/wrapper detection (Cordova, React Native, DexGuard). Skip for trivial APKs where `strings classes.dex | grep flag\{` solves it, for webview-only apps where the answer is a hardcoded URL, and for split APKs / .xapk / .aab bundles (use bundletool first).

Unified reverse engineering toolkit covering Android APK decompilation, native .so/ELF binary analysis, and general reverse engineering techniques. Use for APK unpacking, Java/smali modification, Frida hooking, native binary reversing, CTF challenges, and anti-analysis bypass.

Enforces LogFox Android architecture — modified TEA (Reducer/EffectHandler/Store), api/impl/presentation module boundaries, ViewState mapping, passive UI containers, Hilt `@Binds` conventions. Use when creating or modifying feature modules, adding reducers/effect handlers/view state mappers, setting up navigation via side effects, or reviewing multi-file architectural changes in this repo.

Use when apktool rebuilds fail on Android/Termux, especially around aapt2, resource compilation, signing, install failures, or shell-specific rebuild issues on-device.

Use this skill to compare Android competitor APK versions, infer feature/UI changes, extract static UI evidence, and generate a local browser-openable HTML report with evidence chains.

Use when you need to reverse engineer an Android APK file and create a Unity project from its assets. Automatically installs AssetRipper and processes APK locally.

Audit M3UAndroid Android TV screens for DPad focusability, focus order, initial focus, visual focus states, touch assumptions, and couch-distance readability. Use when reviewing TV UI or changing focus behavior.

Evaluates the quality and transferability of semi-supervised multi-view graph embeddings for Android applications across classification, clustering, and link prediction tasks. Probes whether multi-view and semi-supervised learning improve embedding accuracy and scalability compared to unimodal baselines. Use when the user wants to benchmark on Batch malware detection, Online malware detection, Malware familial clustering, Clone detection, App recommendation, or asks about evaluating this task. Reports F-measure.

STATUS: provisional — invoke to extract value from a legacy (decompiled) Android APK toward a migration to Flutter: business flows/rules, API contracts, module graph, with explicit confidence bands. Not wired — refine after first real use.

Authorized APK signing-scheme and integrity assessment: APK Signature Scheme v1/v2/v3/v4, cert lineage, apksigner verification, split/AAB notes, and app-side integrity or repack detection patterns. Use when reviewing how an owned or lab Android package is signed, re-signed, or self-checks integrity — not for distributing pirated or fraudulently re-signed third-party apps.

Use when you have an Android APK, APKM, or XAPK file and need to extract its REST API endpoints into an OpenAPI specification. Also use when reverse-engineering an Android app's network layer, whether native (Retrofit, Volley, OkHttp, Ktor) or React Native (Hermes bytecode).

Reverse engineering of Android APK files. Use this skill ALWAYS whenever the user mentions APK, Android, decompile, reverse engineer, analyze Android app, extract code, manifest, permissions, DEX classes, resources, certificates, smali, or any kind of Android mobile application analysis. Even if the request is simple like "analyze this APK" or "what does this app do", use this skill. Includes static analysis, metadata extraction, strings, URLs, permissions, Java/Kotlin classes, resources, and suspicious pattern detection.

Use for authorized Android APK reverse engineering: jadx Java/Dex reading, apktool manifest/resources/smali, Frida Android runtime observation, adb/apksigner workflows, rebuild/sign/install planning, and native .so handoff to ida-reverse or radare2.

Launch or create the local Android emulator required before running Android connected/instrumented tests in this repository. Use this whenever running Android tests is required and no suitable device is already connected.

Add in-app APK self-update functionality to Capacitor Android apps. Use when: app auto-update, APK download and install, in-app update, version check, self-update mechanism, GitHub Release APK download, mirror download fallback.

Use this skill when the user needs Android APK packaging for a uni-app/HBuilderX project. Prefer local offline packaging first (no cloud quota), with optional cloud fallback. This skill only handles packaging outputs and logs.

逆向工程技术，包括 ELF/PE 二进制分析、脱壳、反混淆、Android 逆向、固件分析等。

惯用的Kotlin模式、最佳实践和约定，用于构建健壮、高效且可维护的Kotlin应用程序，包括协程、空安全和DSL构建器。

使用Kotest、MockK、协程测试、基于属性的测试和Kover覆盖率的Kotlin测试模式。遵循TDD方法论和地道的Kotlin实践。

Workflow guide when working with Android builds or the mobile/ directory.

Ktor 服务器模式，包括路由 DSL、插件、身份验证、Koin DI、kotlinx.serialization、WebSockets 和 testApplication 测试。

JetBrains Exposed ORM 模式，包括 DSL 查询、DAO 模式、事务、HikariCP 连接池、Flyway 迁移和仓库模式。

Kotlin协程与Flow在Android和KMP中的模式——结构化并发、Flow操作符、StateFlow、错误处理和测试。

Master Material Design 3 and Jetpack Compose patterns for building native Android apps. Use when designing Android interfaces, implementing Compose UI, or following Google's Material Design guidelines.

Generate a complete Kotlin MCP server project with proper structure, dependencies, and implementation using the official io.modelcontextprotocol:kotlin-sdk library.

Master Material Design 3 and Jetpack Compose patterns for building native Android apps. Use when designing Android interfaces, implementing Compose UI, or following Google's Material Design guidelines.

Get best practices for developing applications with Spring Boot and Kotlin.

Expert patterns for Kotlin Coroutines and Flow, covering structured concurrency, error handling, and testing.