The problem is that most rules are androguard rules (like https://github.com/Yara-Rules/rules/tree/master/Mobile_Malware which requires #1) or write rules matching the dex file directly