我测试了 REA，那个能逆向工程任何应用的热门 GitHub 仓库

I Tested REA, the Viral GitHub Repo That Reverse Engineers Any App

A new open source tool called REA lets AI coding agents like Claude Code, Codex and Cursor take apart an app they have never seen the source of. It already has 150,000+ stars on GitHub, so I tested it on a real app and checked the answers myself.

I installed Bruno (an open source API client), gave Claude Code and REA only the files that ship with the app, and asked what it does behind the scenes. 22 minutes and $0.81 later it had a full report, and I checked the main claims against the source and a live network capture.

0:00 The repo everyone is talking about 0:25 The test: one app, one question 1:02 What REA really is (and is not) 2:28 The app I picked and why 3:10 REA draws the map 3:42 Which servers the app contacts 4:35 Why the opt-out switch doesn't stop everything 5:05 HTTPS certificate checking 5:30 The hidden feature 6:02 The honest part: limits of the report 7:04 What this means for you 7:35 Three warnings (fake copies, not a sandbox, legal) 8:43 Your turn

Links REA on GitHub: https://github.com/morluto/rea REA on npm: https://www.npmjs.com/package/rea-agents Bruno (the app I tested): https://github.com/usebruno/bruno

Notes and honesty

• Bruno is open source (MIT) and has a telemetry opt-out in Preferences. This video is not an accusation, it shows what REA can find and how I verified it.
• The analysis was static (reading the code). I confirmed the main claims in the source and with a short live network check, and I say in the video what was not tested.
• Only analyze software you are allowed to test. I am not a lawyer and this is not legal advice.
• This video is not sponsored.

#REA #ClaudeCode #ReverseEngineering #OpenSource