Apktool
Apktool decodes Android application files (APK) to reveal their raw resources and code, aiding reverse engineering and analysis.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add apktool npx -- -y @trustedskills/apktool
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"apktool": {
"command": "npx",
"args": [
"-y",
"@trustedskills/apktool"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
Apktool allows AI agents to decompile Android APK files into a readable directory structure containing source code and resources. It enables the inspection, modification, and recompilation of applications by translating binary data back into Java or Kotlin source files.
When to use it
- Analyzing third-party Android apps to understand their logic without needing the original source code.
- Modifying existing applications to add custom features or remove unwanted functionality before recompiling.
- Extracting assets, strings, and layouts from an APK for security auditing or forensic analysis.
- Preparing modified application packages for installation on rooted devices or emulators.
Key capabilities
- Decompiles Android APKs into a human-readable directory structure.
- Converts binary resources back into Java/Kotlin source code.
- Extracts and manipulates app assets, strings, and XML layouts.
- Supports recompiling modified directories back into installable APK files.
Example prompts
- "Use apktool to decompile the provided Android application and extract all hardcoded API keys from the string resources."
- "Modify the main activity layout in this APK to change the background color, then recompile it using apktool."
- "Analyze the decompiled source code of this banking app to identify potential security vulnerabilities in the login function."
Tips & gotchas
- Apktool requires a Java Development Kit (JDK) to be installed on the system before execution.
- Decompiled code may not perfectly reconstruct complex binary resources, requiring manual verification after recompilation.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.