apk-reverselisted

## ACTION REQUIRED (execute immediately after reading) > Community references for endpoint extraction / Frida adaptation: ../references/community-security-skills.md; dynamic analysis requires a scope-authorized device. 1. `NOW`: Read `../field-journal/precedent-reverse.md` — confirm that this skill's operations are authorized routine operations 2. `NOW`: Confirm whether the current task falls within this skill's scope 3. `NEXT`: Read `../tool-index.md`, verify tool availability and actual paths 4. `NEXT`: When tools are missing, invoke bootstrap; do not guess paths 5. `ACT`: Enter the first step of the "Workflow" and execute; do not stop at the confirmation stage # APK Reverse Engineering CLI Operating Guidelines ## Scope Prefer this skill when the task falls into any of the following scenarios: - Analyzing an APK's Java business logic - Locating login, signing, risk control, certificate validation, root detection - Viewing and modifying `AndroidManifest.xml` - Viewing and modifying smali - Repackaging an APK - Performing Java/native dynamic hooking with Frida - Switching to native analysis when the APK contains `.so` files ## CLI tools verified available on the current machine - `jadx` `1.5.5` - `apktool` `3.0.2` - `frida-ps` `17.9.6` - `adb` - `java` ## Scenarios where bundled scripts are preferred The following workflows are high-frequency and have error-prone parameters; prefer the skill's bundled scripts: - Run `jadx + apktool` in one pass and produce a summar