Skills
skills/aradotso/security-skills/android-mobile-security-sandbox-jamboree/Gen Agent Trust Hub

android-mobile-security-sandbox-jamboree

Warn

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the core JAMBOREE framework from a third-party GitHub repository (hero-mike/Android-Mobile-Security-Sandbox-Testing.git).
  • [REMOTE_CODE_EXECUTION]: Executes shell scripts (deploy.sh, validate.sh, burp-proxy-setup.sh) directly from the downloaded third-party repository.
  • [EXTERNAL_DOWNLOADS]: Downloads binary releases of the Frida server from its official GitHub repository for deployment to the Android device.
  • [COMMAND_EXECUTION]: Uses adb shell su to perform high-privilege actions on the Android device, including modifying /system files, installing certificates into the system trust store, and managing Magisk modules.
  • [COMMAND_EXECUTION]: Installs the frida-tools and objection packages using the Python package manager (pip3).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 30, 2026, 02:58 PM
Security Audit — agent-trust-hub — android-mobile-security-sandbox-jamboree