alvinhayy

Re Static — Development skill for Claude Code

Development community

Static-analyze an APK/IPA/web bundle (endpoints, secrets, permissions, deception).

How to install Re Static

Installs to ~/.claude/commands/alvinhayy-mobile-reverseskill-re-static.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/alvinhayy/Mobile-ReverseSkill/HEAD/.claude/commands/re-static.md -o ~/.claude/commands/alvinhayy-mobile-reverseskill-re-static.md

Restart Claude Code, or start a new session, for it to be picked up.

What Re Static does

description: Static-analyze an APK/IPA/web bundle (endpoints, secrets, permissions, deception) argument-hint:

Invoke the **reverse-engineer** skill and run a full static-analysis pass on: `$ARGUMENTS`

Steps:

Load the reverse-engineer skill.
Detect artifact type (APK/XAPK/AAB, IPA, or web/JS bundle) and run the matching pipeline: manifest/Info.plist → decompile (jadx/apktool; note Flutter libapp.so) → strings/URL carve → secrets (trufflehog

Alternatives in Development

JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
Gallery — Build a static, shareable gallery from your fidelity reports — an index of score cards plus a permalink page ( 3.6k ★
Clio — Claude Code CLI Clone — Agentic coding CLI that connects to Anthropic API (or compatible endpoints) to provide a terminal-based Claude 172 ★