The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches instrumentation server binaries from the official Frida GitHub repository for execution on mobile devices.
[DYNAMIC_EXECUTION]: Utilizes runtime JavaScript injection to hook native and high-level (Java/ObjC) methods, allowing for the observation and modification of process behavior in real-time.
[PRIVILEGE_ESCALATION]: Recommends escalating file permissions (chmod 755) for the instrumentation server on target devices to facilitate execution.
[COMMAND_EXECUTION]: Employs standard CLI tools such as frida, adb, and apktool to manage processes, install agents, and modify binary artifacts.
[DATA_EXFILTRATION]: Provides scripts to dump dynamically loaded DEX files from Android memory to public storage (/sdcard/), which may expose application code to other local users or applications.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Intercepts untrusted data from target process memory, including function arguments (e.g., connect IP/Port) and sensitive inputs (e.g., validatePassword strings) in both SKILL.md and references/android-ios.md.
Boundary markers: Absent; data extracted via instrumentation is processed and logged directly without delimiters.
Capability inventory: Comprehensive process manipulation capabilities including memory reading/writing, function replacement, and network call interception.
Sanitization: No validation or sanitization is applied to data retrieved from hooked processes before it is displayed or processed.

frida