Analyzing Android Malware With Apktool

This automates static analysis of Android APK malware using androguard, apktool, and jadx. It parses the manifest to pull permissions, activities, services, and receivers, then scans for suspicious API calls like dynamic code loading, reflection abuse, and crypto operations. You get a JSON report with risk scores and MITRE ATT&CK mobile mappings, plus extracted strings and network indicators. Useful when you're triaging mobile malware samples or building detection rules and need structured output instead of manually poking through decompiled code. The permission analysis flags dangerous combinations, which catches a lot of common Android malware patterns. Assumes you're working in an isolated environment and have the Python toolchain set up.

Install to Claude Code

npx -y skills add mukul975/anthropic-cybersecurity-skills --skill analyzing-android-malware-with-apktool --agent claude-code