Integration
App X-Ray
Builds evidence-linked HTML/JSON reports, summary cards and diffs from REA analysis of app packages, native build metadata and model files. Its component and configuration findings come from static inputs; they are not observed runtime traffic, a complete security audit or reconstructed software.
Requirements & limits
- Prerequisites: README requires Node.js 22+; supported inputs include Electron/app.asar/source folders, APKs, Go/Rust executables and listed model formats. REA analysis requirements vary with the input.
- Limits: Rules see literal values and metadata; runtime-generated addresses are missed. A detected setting or dependency does not prove runtime behavior or exploitability, and unsupported/obfuscated inputs can leave unknowns.
- Testing evidence: The public gallery uses open-source app snapshots. Report-derived REA-Bench answers reuse those reports as their reference, not an independent runtime ground truth.
- License: Code is MIT; bundled Inter fonts retain SIL OFL 1.1. Reports omit target app code, and upstream software/model rights remain separate.
About this entry
- Type
- Integration
- Category
- Community REA integrations
- Relationship
- Community REA integration
- Targets
- App · Binary
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · Eliot5566/app-xray · Revision 66a7b06
- docs/en/guide.md GitHub · Eliot5566/app-xray · Revision 66a7b06
- https://github.com/morluto/rea/discussions/7974
More in Agents and MCP
- Hex-Rays IDA MCP · Integration
- GhidraMCP · Integration
- Binary Ninja MCP (official) · Integration
- Binary Ninja MCP (fosdickio) · Integration
- IDA Pro MCP (mrexodia) · Integration
- Radare2 MCP Server · Integration