Agent skill

Java Decompiler

by ptn1411 in ptn1411/skill

Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets.

No licenceAuto-check: notesSecurity

Install Java Decompiler

skills CLI
$ npx skills add ptn1411/skill --skill java-decompiler -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ptn1411/skill java-decompiler --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/java-decompiler .claude/skills/java-decompiler && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
java-decompiler
GitHub stars
219
Token cost
~788 tokens
SKILL.md length
186 words
Files
5 (incl. scripts, references)
Skills in repo
22
Repo updated
First seen
Licence
None found

At a glance

Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets.

  • Tasks that involve Reverse engineering and malware
  • SKILL.md covers Purpose, Workflow, Usage and Decompiler Priority, plus 3 more sections
  • Runs Python scripts from its folder; calls python and pip

What it does

Java Decompiler is an agent skill from ptn1411/skill. Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets.

Its SKILL.md is about 790 tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files, including scripts and reference files (for example `references/java_re_patterns.md`, `scripts/analyze_java.py` and `scripts/decompile_java.py`).

It sits in Security, covering Reverse engineering and malware. It works with Java. The repository describes itself as: Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ…

When your agent uses it

  • Tasks that involve Reverse engineering and malware

Example prompts

  • “/java-decompiler”

Requirements

  • Python 3
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Glob, Grep, Bash

What it can do on your machine

Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Glob
    • Grep
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 2 files in scripts/ (Python), which the agent can run.

    Shell commands in SKILL.md call:

    • python
    • pip

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use pip, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Java Decompiler loads about 788 tokens when it runs, and up to ~2.1k if it reads all its reference files. Until then it costs about 42 tokens; SKILL.md has 186 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~42
When it runs · the whole SKILL.md, loaded when a task matches
~788
With references · SKILL.md plus every file in references/, read only if the agent opens them
~2.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Write, Edit, Glob, Grep, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 186 words (~788 tokens).

“Java bytecode (.class) retains nearly all source-level information, making decompilation highly effective. This skill extracts, decompiles, and analyses Java applications across all packaging formats: JAR, WAR, EAR, APK, and raw class files.”

— opening of SKILL.md by ptn1411
name
java-decompiler
allowed-tools
Read, Write, Edit, Glob, Grep, Bash

Read the full SKILL.md on GitHub

Files

SKILL.md and 4 other files (scripts, references) in java-decompiler of ptn1411/skill.

  • SKILL.md
  • references/java_re_patterns.md
  • scripts/analyze_java.py
  • scripts/decompile_java.py
  • tests/test_decompile_java.py

Open the folder on GitHubat commit ce2b65e

Compare with similar skills

Java Decompiler next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Java Decompiler compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Java Decompiler this skillptn1411/skill219—~788Automated safety check: NotesNone
Openfasttrace Reverse Specsitsallcode/openfasttrace198—~2.9kAutomated safety check: PassGPL-3.0
APK Static Analysisdslsdzc/rev-skills117—~2kAutomated safety check: PassApache-2.0
Code Audit3stoneBrother/code-audit8931 repos~2.7kAutomated safety check: PassNone
Webhome Extension Builderwebhtv/webhtv1.7k—~2.8kAutomated safety check: PassGPL-3.0
CodeQL Security Scantrailofbits/skills7.4k—~4.6kAutomated safety check: NotesCC-BY-SA-4.0

Similar skills

  • Openfasttrace Reverse Specs

    itsallcode/openfasttrace

    Reverse-engineer missing or incomplete OpenFastTrace system requirements and arc42-style design documentation from a project's user guide, existing documentation, tests, and code.

    198 GitHub stars~2.9k tokensUpdated today
    SecurityAuto-check passed
  • APK Static Analysis

    dslsdzc/rev-skills

    Guides static analysis of an Android APK with jadx and apktool: reading the manifest, Java code, resources and permissions, and recognizing hardening or obfuscation.

    117 GitHub stars~2k tokensUpdated 2 days ago
    SecurityAuto-check passed
  • Code Audit

    3stoneBrother/code-audit

    Professional code security audit skill covering 55+ vulnerability types.

    893 GitHub starsUsed in 1 repo~2.7k tokens
    SecurityAuto-check passed
  • Build, review, debug, reverse-engineer, and package WebHome injected extension scripts for FongMi/WebHome App WebView pages.

    1.7k GitHub stars~2.8k tokensUpdated today
    SecurityAuto-check passed
  • CodeQL Security Scan

    trailofbits/skills

    Official

    Scans a codebase for vulnerabilities with CodeQL's data flow and taint tracking in run-all or important-only modes, including data extensions for project-specific sources and sinks.

    7.4k GitHub stars~4.6k tokensUpdated 5 days ago
    SecurityAuto-check: notes
  • Reverse Flow

    lingbol088-spec/reverse-flow-skill

    Guided reverse engineering workflow for binaries, firmware, mobile apps, scripts, document samples, protocol captures, and unknown artifacts.

    935 GitHub stars~2.4k tokensUpdated 2 mo ago
    SecurityAuto-check passed

More from ptn1411/skill

All 22 skills in this repo
  • Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.

    219 GitHub stars~917 tokensUpdated 15 days ago
    Auto-check passed
  • Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.

    219 GitHub stars~830 tokensUpdated 15 days ago
    Auto-check: notes
  • Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.

    219 GitHub stars~683 tokensUpdated 15 days ago
    Auto-check: notes
  • Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.

    219 GitHub stars~752 tokensUpdated 15 days ago
    Auto-check: notes
  • Web App Scanner

    ptn1411/skill

    Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…

    219 GitHub stars~3.2k tokensUpdated 15 days ago
    Auto-check: notes
  • Dotnet Decompiler

    ptn1411/skill

    Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

    219 GitHub stars~929 tokensUpdated 15 days ago
    Auto-check: notes

Works with

Categories

Questions about Java Decompiler

What does Java Decompiler do?

Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets. Java Decompiler is an agent skill from ptn1411/skill. Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets.

When should I use Java Decompiler?

Java Decompiler fits situations like: tasks that involve Reverse engineering and malware.

How do I install Java Decompiler in Claude Code?

Run `npx skills add ptn1411/skill --skill java-decompiler -a claude-code`. Or copy the skill folder (java-decompiler in ptn1411/skill) into .claude/skills/java-decompiler in your project. Claude Code loads it when a task matches its description.

How do I install Java Decompiler in Codex?

Run `npx skills add ptn1411/skill --skill java-decompiler -a codex`. Or copy the skill folder (java-decompiler in ptn1411/skill) into .agents/skills/java-decompiler in your project. Codex loads it when a task matches its description.

Can I use Java Decompiler in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill java-decompiler -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/java-decompiler, .gemini/skills/java-decompiler, .github/skills/java-decompiler and .opencode/skills/java-decompiler in your project.

What does Java Decompiler need to run?

Going by SKILL.md and its folder, Java Decompiler needs Python for the scripts in its folder and the command-line tools its instructions call (python and pip). Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Write, Edit, Glob, Grep, Bash.

Does Java Decompiler access the network?

SKILL.md contains no URLs. Its commands use pip, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Java Decompiler safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Java Decompiler use?

No licence was found for Java Decompiler or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Java Decompiler use?

About 788 tokens (SKILL.md is roughly 3.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.3k tokens, read only when the agent opens those files.

What are the alternatives to Java Decompiler?

Skills that share tags, products or a category with Java Decompiler: Openfasttrace Reverse Specs (itsallcode/openfasttrace, 198 stars), APK Static Analysis (dslsdzc/rev-skills, 117 stars), Code Audit (3stoneBrother/code-audit, 893 stars) and Webhome Extension Builder (webhtv/webhtv, 1.7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Java Decompiler?

ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 219 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.

Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.