feat: add /quark and /quark-rule-gen Claude Code skills

[haeter525]

Description

Adds two Claude Code skills that let AI drive Quark Engine directly — running analysis on APKs and generating detection rules — packaged as a Claude Code plugin for easy install.

1. /quark:analysis — maps a natural-language request to the correct quark CLI flags, prints the command and raw output, then offers next steps
2. /quark:rule-gen — guides the AI through reading decompiled code, formatting Dalvik descriptors, and validating a generated rule against a real APK before outputting it

Install

1. Claude Code installed.
2. Quark-Engine installed.
3. Install the plugin by running these commands inside Claude Code:

   /plugin marketplace add ./
   /plugin install quark@quark-engine
   

How to use

/quark:analysis

1. Open Claude Code
2. Type /quark:analysis to start
   • Claude will ask for the APK path and the type of analysis, print the quark command being run, display the output, then offer follow-up options (detail report, call graph, JSON export, or rule generation)

Example: Ahmyth-quark-analysis.html

---

/quark:rule-gen

1. Open Claude Code
2. Type /quark:rule-gen to start
   • Claude will ask for the behavior description and a code snippet, generate a Quark rule, and validate it against a real APK.

Example: Ahmyth-quark-rule-gen.html

Key Changes

• .claude/skills/quark/SKILL.md: the /quark:analysis skill — decision table for all automatable quark modes, 5-step workflow, prints command and raw output before analysis
• .claude/skills/quark/scripts/run_analysis.sh: passthrough CLI wrapper that handles APK path quoting and stderr capture
• .claude/skills/quark-rule-gen/SKILL.md: the /quark:rule-gen skill — Dalvik descriptor guide, score rubric keyed to the five detection stages, canonical label list, and a 3-attempt validation loop
• .claude/skills/quark-rule-gen/scripts/validate_rule.sh: runs a candidate rule against an APK and checks for confidence != 0% (not just len(crimes) > 0 — every loaded rule appears in the output JSON regardless of match)
• plugin.json / marketplace manifest: packages the two skills as a Claude Code plugin for distribution outside this repo

Tests

• Run /quark:analysis on Ahmyth.apk — summary report produces correct raw output table
• Run /quark:rule-gen on MicManager.smali from Ahmyth.apk — generated rule matches at 100% confidence on the first attempt

TODO

• Update README.md with a "Quark-Engine Skills" section — install instructions and usage examples
• Package the two skills as a Claude Code plugin (plugin.json manifest) for distribution outside this repo

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.27%. Comparing base (cf35a66) to head (c1b002b).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #947      +/-   ##
==========================================
+ Coverage   78.89%   80.27%   +1.38%     
==========================================
  Files          81       82       +1     
  Lines        7131     7185      +54     
==========================================
+ Hits         5626     5768     +142     
+ Misses       1505     1417      -88     

Flag	Coverage Δ
unittests	80.27% <ø> (+1.38%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[pulorsok]

LGTM.