メニュー
Use this skill when Android reverse engineering needs JADX for APK, DEX, JAR, AAR, AAB, smali, resource decoding, deobfuscation, mappings, GUI search, smali debugging, API automation, or plugin workflows.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Use this skill when MaxTAC Source should use the plugin-bundled codebase-memory-mcp MCP integration or CLI fallback for repository indexing, architecture overview, structural search, call-path tracing, diff impact mapping, ADR lookup, or code graph evidence before SAST triage, CFG work, OpenGrep authoring, or source scans.
Use this skill when MaxTAC Android needs a loop that models an Android app's user-facing resources and systematically walks activities, deep links, forms, WebViews, share targets, notifications, and other user-facing inputs for security auditing while respecting scope and safety constraints.
Use this skill when Apple Systems research needs a loop over IPSW or OTA firmware diffs, Apple security advisories, CVEs, build provenance, and binary/source patch archaeology to identify patched Apple components, infer why they changed, and enrich an ASB threat model.
Use this skill when MaxTAC Binary needs a loop to model how a binary was compiled and loaded, preserve reverse-engineering provenance, prioritize executable functions by reachability or call frequency, systematically decompile or parse functions and data structures, and produce durable functionality and security evidence.
Use this skill when MaxTAC research needs a durable security model, invariant dictionary, invariant receipts with proof obligations and refutation conditions, architecture understanding, first-order-logic-style assertions, unknown tracking, contradiction tracking, or model-backed auditor handoffs across source, web, cloud, binary, supply-chain, Android, Apple, or Microsoft targets.
Use this skill when MaxTAC research needs goal-bounded auditor subagents, verifier debate subagents, specialist bug-class review, mitigation review, or independent votes on a vulnerability hypothesis or PoV.
| name | maxtac-re-jadx |
| description | Use this skill when Android reverse engineering needs JADX for APK, DEX, JAR, AAR, AAB, smali, resource decoding, deobfuscation, mappings, GUI search, smali debugging, API automation, or plugin workflows. |
Use JADX when readable Java/Kotlin-adjacent output, decoded Android resources, manifest triage, deobfuscation mappings, GUI navigation, or repeatable JSON/API extraction is more useful than raw Dalvik disassembly alone.
Treat JADX output as a decompiler hypothesis. Preserve the original APK/DEX, record tool version and options, and verify security-sensitive claims against smali, dex offsets, resource tables, runtime behavior, or independent tooling when the decompiled Java is ambiguous.
Identify the installed CLI/GUI entrypoints and Java state:
jadx --version
jadx --help
jadx-gui --help
java -version
On Windows, use the .bat launchers when the release bin directory is not on PATH. If JADX is not installed or a source build is needed, ask first, then read <skill-dir>/references/jadx-install-build.md.
Use python3 <skill-dir>/scripts/jadx-export.py to preserve input hashes, JADX version, export mode, deobfuscation flags, plugin options, CFG settings, and the exact command line. It plans by default and only executes with --run:
python3 <skill-dir>/scripts/jadx-export.py ./target.apk \
--output-dir ./jadx-evidence \
--mode all \
--deobf \
--cfg
Add --run only after reviewing the generated command in command.txt.
Store JADX projects, exports, logs, decoded resources, generated CFGs, mappings, and debugger traces as evidence artifacts. When JADX work establishes durable subsystem behavior, rewrite the conclusion into the stable research-library markdown and link back to the artifact directory. Avoid creating research/<component>/jadx/ as a research submodule unless JADX itself is the target.
Includes output directory controls, source/resource-only runs, single-class decompilation, JSON output, Gradle export templates, configs, plugin options, exit-code handling, logs, filesystem/cache/temp locations, and repeatable evidence capture.
See: <skill-dir>/references/jadx-cli-export.md
Includes decompilation modes, transformation toggles, bad-code handling, debug line metadata, raw smali comparison, dex offset evidence, fallback/simple modes, CFG dot output, Kotlin/anonymous/inner-class caveats, and correctness checks.
See: <skill-dir>/references/jadx-decompilation-workflow.md
Includes manifest and resources.arsc decoding, resource-only workflows, resource aliasing, obfuscated resource extensions, APK/AAB/AAR/XAPK/APKM inputs, native library/assets triage, Gradle export type detection, and resource evidence checklists.
See: <skill-dir>/references/jadx-android-resources.md
Includes GUI search provider behavior, raw versus alias names, comment search, resource search size/type filters, mapping formats and modes, JOBF generated renames, source-name aliases, rename flags, filesystem case handling, and deobfuscation evidence rules.
See: <skill-dir>/references/jadx-search-renaming-mappings.md
Includes JadxArgs, JadxDecompiler, lazy class decompilation, JavaClass and JavaMethod APIs, code metadata, resource loading, JSON evidence extraction, custom code/resource inputs, plugin passes, plugin options, plugin installation, and cache/hash discipline.
See: <skill-dir>/references/jadx-automation-api-plugins.md
Includes .jadx project files, code/comment/rename persistence, GUI cache behavior, smali debugger/JDWP attachment, breakpoints, stepping, runtime register/field reads and writes, export dialog behavior, and handoff artifacts.
See: <skill-dir>/references/jadx-gui-debugging-evidence.md
Includes default XML/ZIP protections, path traversal and zip bomb checks, environment-variable overrides, hostile archive handling, no-class/resource-only runs, analysis errors, plugin risk, and case-isolation safety controls.
See: <skill-dir>/references/jadx-security-failure-modes.md