CtrlK
BlogDocsLog inGet started
Tessl Logo

apk-reverse

在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook,以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。

58

Quality

66%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./skills/apk-reverse/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

53%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with concrete commands and a sequenced workflow, but it is held back by redundant command sections, inline version pins, missing in-workflow validation for destructive repackaging, and four orphaned bundled reference files that are never surfaced.

Suggestions

Surface the bundled references (frida-cookbook.md, frida-bypass-kit.md, apk-security-checklist.md, android-advanced.md) as one-level-deep links from the relevant sections and move bulk Frida/manifest detail there, instead of leaving them orphaned and inlining the content.

Remove the redundant '快速命令备忘' section (it duplicates '工具分工' and the workflow) and relocate the pinned tool version numbers into a 'validated on' or version section so time-sensitive data stops padding the working body.

Add explicit validation checkpoints inside the workflow (e.g. confirm jadx produced readable Java before patching smali; verify `apktool b` rebuilt and `apksigner verify` passes before `adb install -r`) rather than relying only on the final self-check, since repackaging and install are destructive.

DimensionReasoningScore

Conciseness

Mostly action-dense, but the '快速命令备忘' section duplicates commands already shown in '工具分工' and the workflow, and pinned tool version numbers (jadx 1.5.5, apktool 3.0.2, frida-ps 17.9.6) sit inline as time-sensitive data rather than in a version/deprecated section.

3 / 5

Actionability

Provides concrete, mostly copy-paste-ready commands (jadx -d, apktool d/b, frida -U -f, adb install) and full script invocations with parameters, but script examples use <skill-root> and Windows-path placeholders that require substitution.

4 / 5

Workflow Clarity

A clear 6-step recommended workflow exists with a final MUST-pass self-check, but destructive/batch operations (smali patching, apktool b rebuild, adb install) lack interleaved validate-then-proceed checkpoints; the cap for destructive workflows without validation holds at 3.

3 / 5

Progressive Disclosure

The four bundled reference files (references/frida-cookbook.md, frida-bypass-kit.md, apk-security-checklist.md, android-advanced.md) are never linked from the body — effectively orphaned — while the body instead points at non-bundle ../ paths; bulk Frida/manifest detail is inlined where it could be deferred.

2 / 5

Total

12

/

20

Passed

Description

80%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that concretely enumerates six reverse-engineering actions and gives an explicit use-when trigger with named preferred tools. It is held back only by a single-scenario trigger and slight overlap with native-RE skills.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook...so/native 分析' — giving comprehensive coverage of what the skill does rather than vague domain language.

5 / 5

Completeness

Clearly states the 'what' (six concrete actions) and an explicit 'when' trigger ('在 CLI 环境下做 Android APK 逆向时使用'), but the trigger is a single scenario rather than the multiple enumerated triggers of a top anchor.

4 / 5

Trigger Term Quality

Natural terms a user would say are present (APK 逆向、解包、反编译、smali、重打包、Frida Hook、so/native) with some synonyms, but a few common variations/extensions (e.g. .dex, 脱壳) are missing.

4 / 5

Distinctiveness Conflict Risk

'Android APK 逆向' is a clear niche with distinct triggers and named tools (jadx/apktool/frida/adb), but explicitly routing to ida-reverse/radare2 for native analysis creates minor overlap with related RE skills.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.