Crate droidsaw 

droidsaw-core — unified Android reverse engineering toolkit.

This crate ships both a library and two binaries:

• droidsaw — the CLI (src/main.rs), always compiled.
• droidsaw-mcp — the MCP server (src/bin/mcp.rs), compiled only when --features mcp is set. Depends on the mcp module below and on rmcp + tokio.

Both binaries consume the same commands::* tool layer — one code path per tool across both transports.

Modules

analysis

commands

Agentic CLI command implementations.

context

corpus_runner

Unified corpus-sweep runner.

detectors

Detector calibration for the trufflehog ingestion path.

error

Classified error envelope for agentic output.

sarif

Emit-only SARIF 2.1.0 serialization for droidsaw audit findings.

semgrep

Semgrep CLI arg composition.

threat_model

Threat-model module — composition root for the unsigned-evidence envelope producer + STIX consumer.

trufflehog

Trufflehog subprocess invocation + result persistence.