androidstudio-app-pentest-environment

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The guide contains explicit, ready-to-run techniques for disabling SSL/TLS verification, installing system CA certs, instrumenting apps to dump memory and crypto inputs/outputs, hiding root and app-detection, and running a privileged Frida server (including binding to 0.0.0.0) — all of which enable credential theft, unauthorized MitM/data exfiltration, and remote code execution/backdoor access if abused.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime fetching and execution of external code (e.g., git clone https://gitlab.com/newbit/rootAVD.git and downloading/running artifacts from https://github.com/frida/frida/releases and various GitHub releases), which are executed (./rootAVD.sh, adb install, running frida-server, installing Magisk modules) and thus directly control the environment and behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs obtaining root (Magisk), running adb root/remount, modifying ramdisk and /system files, installing modules to bypass security checks and touching device/system paths — all actions that change system-level state and require elevated privileges.