Introducing Agents.·Read
OverviewAgentsWorkflowsExecutionDeveloper ToolsSecurityLibrary
Updated Oct 19, 2026

Utilities

Read APK metadata as native JSON

apkeditor-info is an offline adapter for a selected REAndroid/APKEditor operation.

Agent
Read APK metadata as native JSONRetain the native artifact

overview

What apkeditor-info does

Supply an owned APK to inspect package metadata through APKEditor info. This selected operation does not rebuild, merge or execute an app.

A FILE containing the native JSON array. The adapter requires a nonempty array with a package string. Metadata may remain readable when DEX contents are corrupt; this job does not validate DEX, signatures, app trust or runtime behavior.

Native execution has a 120-second timeout and JVM -Xmx256m. The adapter checks a 4 MiB artifact limit after execution; this is not peak process-memory or temporary-disk containment. The supplied file is limited to 20 MiB; symlink input is refused. ZIP entries are limited to 2000 and 64 MiB declared expanded size. AndroidManifest.xml is required; raw duplicate, absolute, parent, backslash and symlink archive paths are refused. Declared sizes are not a full archive-integrity guarantee.

Pinned native source V1.4.9 at 57d10e494cda9707fa6883aa84a62f833317c238. Final-image native positive and negative fixtures passed. The private platform fixture-tool-verifier run passed. The exact image and source/notices bundle are publicly downloadable; the exact public Library identity was verified.

source github.com/REAndroid/APKEditor/tree/57d10e494cda9707fa6883aa84a62f833317c238

use cases

Where apkeditor-info fits

Read APK metadata as native JSON

Supply an owned APK to inspect package metadata through APKEditor info. This selected operation does not rebuild, merge or execute an app.

Retain the native artifact

A FILE containing the native JSON array. The adapter requires a nonempty array with a package string. Metadata may remain readable when DEX contents are corrupt; this job does not validate DEX, signatures, app trust or runtime behavior.

reference

apkeditor-info inputs and flags

1 inputs
NameTypeFlagDescription
apkFILE--apkOwned APK ZIP file for metadata inspection.

Showing key inputs. apkeditor-info exposes 1 inputs in total.

example

Run apkeditor-info

apkeditor-info · command
python3 /app/run.py --apk ./owned-demo.apk ./output
sample output
[
 {
  "source-file":"/input/positive.apk",
  "package":"org.trickest.fixture",
  "VersionCode":1,
  "VersionName":"1.0",
  "AppName":"Trickest Offline Fixture"
 }
]

guidance

Choosing apkeditor-info

Use this job for package metadata. Apktool decodes resources and smali, bundletool validates AAB structure, and JADX reconstructs Java. APKEditor upstream also has editing commands that this node does not expose.

faq

apkeditor-info questions

apk: Owned APK ZIP file for metadata inspection.

A FILE containing the native JSON array. The adapter requires a nonempty array with a package string. Metadata may remain readable when DEX contents are corrupt; this job does not validate DEX, signatures, app trust or runtime behavior. The registered contract also exposes a FOLDER output; the primary native artifact is the FILE described here. The downloaded primary FILE and its fixture semantics were verified in the platform run.

Native execution has a 120-second timeout and JVM -Xmx256m. The adapter checks a 4 MiB artifact limit after execution; this is not peak process-memory or temporary-disk containment. The supplied file is limited to 20 MiB; symlink input is refused. ZIP entries are limited to 2000 and 64 MiB declared expanded size. AndroidManifest.xml is required; raw duplicate, absolute, parent, backslash and symlink archive paths are refused. Declared sizes are not a full archive-integrity guarantee.

Use this job for package metadata. Apktool decodes resources and smali, bundletool validates AAB structure, and JADX reconstructs Java. APKEditor upstream also has editing commands that this node does not expose.

Yes. This Library tool uses the tested image and supplied-file contract. Native fixtures and the private platform fixture-tool-verifier run passed; the exact image, adapter source and notices are publicly downloadable through the repository directions below.

The public repository overview provides immutable image and ORAS source/notices download commands, the exact bundle SHA256 and pinned native source directions. The bundle retains the adapter, build recipes, owned fixtures, portable native/verifier harnesses, installed and embedded notices, dependency source/POMs and matching Debian OpenJDK source payloads. First-party adapter licensing is separate from native/component licenses. Use its IMAGE override with the immutable public image to reproduce the native fixture without a GHCR account. Source provenance qualifications are retained; this is not a reproducible-build or exhaustive-SBOM claim. Image, source and license notice downloads.

related

More Utilities tools

  1. browser-fetch

    Headless Chromium render: requested URL, final URL, status, and title next to the page.

  2. cewl

    Spider a URL and return a wordlist for password crackers.

  3. csvkit

    SQL on one CSV. The table name is the file stem.

  4. dnsgen

    Wordlist and mined-word subdomain permutation.

  5. duckdb

    In-process SQL on CSV, JSON, and Parquet. No server.

  6. edge-tts

    Microsoft Edge neural speech from text or a script file. No API key.

Run apkeditor-info yourself

Complete native APKEditor metadata JSON array from a self-owned APK fixture. The source-file path reflects the native test input and can differ on the platform. Invalid ZIP and malformed manifest cases were rejected. Corrupt DEX can legitimately retain readable package metadata; this job is not DEX validation.

Open apkeditor-info in the libraryBuild a workflow with it

Facts on this page come from the live Trickest tool library.