Android Armor Breaker

Trust Score 62/100

Frida- and root-based Android APK unpacking: reinforcement analysis, intelligent DEX extraction and root-memory extraction for commercial protections.

triggers:unpack apkextract dexfrida unpackingroot memory extractionapk reinforcement analysis

GitHub SKILL.md

What it does

Android Armor Breaker is a multi-strategy unpacking skill for Android apps. It combines Frida-based dynamic injection, root-memory static analysis, and DEX extraction routines to analyze APK reinforcement and extract runtime DEX files (including VDEX support).

When to use it

Use when analyzing protected or obfuscated Android APKs to recover DEX code, perform reinforcement vendor analysis, or extract runtime DEX from devices (requires adb and sometimes root). Typical scenarios: reversing protected apps, security research, or incident response on Android binaries.

What's included

Scripts: the SKILL.md documents a scripts/ layout and explicit extractor/analysis scripts (root_memory_extractor.py, apk_protection_analyzer.py, memory_snapshot.py) — repo indicates actionable tooling.
References: in-document technical details, usage examples, and a .clawhub publishing section.
Instructions: stepwise workflow: analyze APK, select strategy (Frida vs root memory vs snapshot), run extractor, and validate DEX output.

Compatible agents

Agents with shell access and ADB/Frida capabilities (security research tooling): OpenClaw-managed agents or developer environments where adb and frida-tools can be executed.

Audit Summary

Android reverse-engineering skill for bypassing commercial app protections (IJIAMI, Bangcle, 360, Tencent) via Frida injection and root memory extraction. 8 of 11 Python scripts fail on import due to missing i18n_logger module (not on sys.path when run from temp dir). The only script that ran successfully was i18n_logger.py itself. The skill is well-documented but extremely niche, requiring a rooted Android device, ADB, and Frida.

Watch Out

All Python scripts depend on i18n_logger module which fails to import when scripts are copied to temp dir
Bash wrapper uses eval with unquoted variable interpolation — shell injection risk
Requires rooted Android device, ADB, and Frida — not usable without significant setup

Missing Dependencies

i18n_logger (bundled but not importable from temp dir)

Notes

Dual-use tool designed to bypass commercial Android app protections. The skill itself does not target the host system or exfiltrate data — it targets Android apps on connected devices. Shell injection risk in bash wrapper. Missing module dependency breaks most scripts.

Information

Repository: android-armor-breaker
Stars: 32

Trust Score

Overall62

Security73

Code Quality50

Architecture52

Usefulness35

Related Skills

Reverse Engineer

Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for

Sandbox0 Integration

Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.

CTF Write-up Generator

Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.

Azure External Attack Surface Management

Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform

Node.js Best Practices

Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.

radar — Smart Contract AST & Security Analysis

Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r

Bash Pro

Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf

Android Bluetooth

Controls Android Bluetooth/BLE: status, power, scanning, connect/disconnect, and permission recovery for device workflows.

Back to Skills