The author built a small Electron app with one window, one preload script, three bridge functions, three private channels and a deliberately hidden network call, then let REA analyse it without any hints. According to the post, REA recovered every one of those elements within about 30 seconds and cited the exact file, function and call behind each finding. The post presents REA as an open-source MCP server for Claude Code that inspects Electron apps, websites, Android APKs and (with Ghidra) native binaries, running the analysis locally, and walks through setup with `npx rea-agents setup` plus a first prompt for mapping windows, the preload bridge and IPC channels on an app you own.
▶ ♫I hid a network call inside an app and told no one. The 400K-star REA found it i
Stars 0♥ 32