apk-teardown-research

该技能用于Android APK的静态拆解研究，通过Crawlora API提交.apk或HTTPS文件URL，轮询作业完成后获取标准化JSON结果。核心功能包括：分析清单、权限、签名、SDK和库信号；对比两个版本差异；构建多版本发布时间线；比较两个包可能存在的共同所有权信号。典型场景：移动应用安全、来源溯源、SDK与权限研究、版本发布历史分析。输入为APK文件或公开URL，输出为干净JSON，需设置CRAWLORA_API_KEY环境变量。

crawlora-org

热度 48.76

最近更新 2026-10-05 09:10:57

分类：安全依赖：第三方 API / 代码执行应用场景：API 集成 / 研究 / 数据处理

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add apk-teardown-research

Metadata

name: apk-teardown-research
description: Analyzes Android APKs through the Crawlora API — submit an APK or public URL, inspect static-analysis results, compare versions, build timelines, and compare ownership signals — returning clean JSON. Use for mobile-app security, provenance, SDK, permission, signing, and release-history research.

APK teardown research

Submit Android packages for static analysis and compare completed teardown jobs as normalized JSON. This skill is for authorized analysis of packages you are allowed to inspect.

When to use this skill

Inspect manifest, permissions, signing, SDK, library, and tech-stack signals.
Diff two versions of the same app.
Build a multi-version release timeline.
Compare two different packages for possible common ownership signals.

Setup

Get a Crawlora API key at crawlora.net.
Set CRAWLORA_API_KEY in the environment before running the helper.
The helper reads CRAWLORA_API_KEY from the environment and sends requests to https://api.crawlora.net/api/v1.

How it works

Submit one .apk/.xapk or HTTPS file_url with /apk-teardown/jobs. Poll the returned job path until complete, then use /apk-teardown/diff, /apk-teardown/timeline, or /apk-teardown/compare-ownership with completed job ids. Never submit packages or URLs without the necessary authorization.

Full endpoint list: reference/endpoints.md.