Integration
REA Workspace Template
A clone-first Chinese workspace template for analyzing one target per workspace with REA from Claude Code or Codex. It ships project-level REA MCP settings, agent rules that require CONFIRMED/GUESS labels with evidence locations, seven task prompts and standard-library scripts that hash imported originals, stage writable copies and strip values from HAR captures. It organizes analysis rather than performing it, and its acceptance run used only synthetic samples.
Requirements and limitations
- The reviewed pin is the repository’s only commit, dated 2026-10-17. It needs Git, Python 3.11+, Node.js with npm, and Claude Code or Codex; README installs rea-agents 6.4.0, the version it was validated with, and the bundled .mcp.json and .codex/config.toml both start a locally installed rea --mcp. The template supplies no REA program, decompiler or model configuration, and it adapts workflow ideas from a third-party post without adopting that post’s model, cost or timing claims.
- Engines are separate: APK DEX work needs JADX and a full JDK, native targets need a Ghidra, Hopper or IDA provider configured through REA’s installation guide, and commercial engines need their own licenses; source, JS/Electron and saved-HAR workflows need no native decompiler. The prompts cover source mapping, API reconstruction from a sanitized HAR to OpenAPI 3.1 and a TypeScript client, JavaScript, native binaries (at most 30 functions per round), APKs, unknown file formats and session handoff; they are task templates, not completed analyses.
- scripts/workspace.py copies one target into a Git-ignored target/ directory without running it, records SHA-256 baselines, sets files to 0444, rejects symlinks and special files, and creates a writable work/ copy; verify reports changed, added or missing files. sanitize_har.py rebuilds a structural HAR copy, removing header values, cookies, URL credentials and query strings and replacing JSON values with placeholders. README warns that hosts, paths and field names can still identify users and need manual review.
- docs/VALIDATION.md (2026-10-17) reports 12 passing standard-library tests, a healthy rea mcp doctor run listing 170 tools, and REA static analysis of a synthetic JavaScript app and a synthetic HAR with Node 24.18.0 and Python 3.12.7. It lists client MCP connection after restart, real APK and native targets, real-HAR anonymization and runtime work as unverified, and its smoke-test outputs are not committed. This collection read the files without running the scripts, tests or REA.
- README states that the Claude Code permission rules, read-only file modes and SHA-256 baselines are not an isolation boundary, and recommends read-only mounts and controlled networking where strong isolation is needed. AGENTS.md defaults to static analysis and reserves running samples, connecting devices and contacting target services for authorized tasks. The repository has no license file, so reuse terms are unstated; REA, analysis engines, clients and targets keep their own terms.
About this entry
- Type
- Integration
- Category
- Community REA integrations
- Relationship
- Community REA integration
- Targets
- App · Binary · Website
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- docs/VALIDATION.md GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- docs/SOURCES.md GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- AGENTS.md GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- .mcp.json GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- .codex/config.toml GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- .claude/settings.json GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- scripts/workspace.py GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- scripts/sanitize_har.py GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- prompts/02-reconstruct-api.md GitHub · dobest1024/rea-workspace-template · Revision fc15b9a
- prompts/04-native.md GitHub · dobest1024/rea-workspace-template · Revision fc15b9a