1/
I hid a network call inside an app and told no one. The 400K-star REA found it in 30 seconds, with the file that proves it. Here's the app: 1 window, 1 preload script, 3 bridge functions, 3 private channels, 1 hidden network call. I told REA none of it. Every number matched. That's when it clicked. Your agent can now open software it has never seen and come back with receipts. REA is an open source MCP server for Claude Code. It reads Electron apps, websites, Android APKs, and native binaries once you add Ghidra. Every answer points at the exact function, file and call behind it. The analysis runs on your machine. Setup takes 5 minutes: → npx rea-agents setup → pick Claude Code, approve the plan, restart → ask Claude which REA tools it has First prompt to try on an app you own: "Map the windows, the preload bridge and every IPC channel. Cite the file and function for each. List what you could not resolve." That last line keeps it honest. Check a couple of its claims by hand and you'll know how far to trust the rest. The full guide has the install, the prompts, the two-session method for building your own version, where it breaks, and which Claude model to use for what.
