Security

apk-teardown-research

Try it

Analyzes Android APKs through the Crawlora API — submit an APK or public URL, inspect static-analysis results, compare versions, build timelines, and compare ownership signals — returning clean JSON. Use for mobile-app security, provenance, SDK, permission, signing, and release-history research.

What it does

Analyzes Android APKs through the Crawlora API — submit an APK or public URL, inspect static-analysis results, compare versions, build timelines, and compare ownership signals — returning clean JSON. Use for mobile-app security, provenance, SDK, permission, signing, and release-history research.

The skill document

APK teardown research

Submit Android packages for static analysis and compare completed teardown jobs as normalized JSON. This skill is for authorized analysis of packages you are allowed to inspect.

When to use this skill

  • Inspect manifest, permissions, signing, SDK, library, and tech-stack signals.
  • Diff two versions of the same app.
  • Build a multi-version release timeline.
  • Compare two different packages for possible common ownership signals.

Setup

  • Get a Crawlora API key at crawlora.net.
  • export CRAWLORA_API_KEY=sk_your_key_here
  • Requests use x-api-key: $CRAWLORA_API_KEY against https://api.crawlora.net/api/v1.

How it works

Submit one .apk/.xapk or HTTPS file_url with /apk-teardown/jobs. Poll the returned job path until complete, then use /apk-teardown/diff, /apk-teardown/timeline, or /apk-teardown/compare-ownership with completed job ids. Never submit packages or URLs without the necessary authorization.

Full endpoint list: reference/endpoints.md.

Related skills

Mines App Store and Google Play data via the Crawlora API — app details, reviews, ratings, store rankings, and similar apps — as clean JSON. Use when the user wants mobile-app reviews, ratings, store charts/rankings, or competitive ASO (app store optimization) research without scraping store pages.

1 installs

Fetches structured public web data via the Crawlora REST API — search engines, e-commerce, social, finance, maps, app stores, media, and reviews — returning clean JSON instead of HTML. Use whenever the user needs real data from a public website (prices, listings, reviews, transcripts, SERPs, trends, financials, places) and would otherwise have to scrape or parse HTML.

1 installs

Performs competitor research and generates detailed analysis reports with market positioning insights. Covers feature comparison, pricing analysis, SWOT, and...

Use when auditing Android/Termux network exposure, connectivity, proxies, listeners, and unsafe ports from the device.

1 installs