The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download various Android reverse engineering tools, including Apktool, jadx, smali, APKEditor, and Frida from their respective official GitHub repositories and websites.
[REMOTE_CODE_EXECUTION]: Instructions include downloading and executing setup scripts from GitHub repositories to configure GApps and Magisk within Redroid and Waydroid containers.
[PRIVILEGE_ESCALATION]: The guide includes steps for rooting Android Virtual Devices (AVD) using tools like rootAVD and utilizes sudo for system-level configurations such as tool installation, kernel module loading, and container management.
[COMMAND_EXECUTION]: The skill lists numerous shell commands for the agent to execute, covering the full APK modification lifecycle: decompilation, resource merging, recompilation, zipalign, signing, and device interaction via ADB.
[INDIRECT_PROMPT_INJECTION]: As the skill is designed to ingest and process external APK files and libraries (JAR/AAR), it possesses an inherent attack surface where malicious instructions could be embedded in the data being analyzed.
Ingestion points: External APK files, library JARs, and AAR files processed by tools like jadx, apktool, and baksmali (SKILL.md, references/adding-features.md).
Boundary markers: None specified; the skill assumes the user provides the target files for analysis.
Capability inventory: Extensive capabilities including file system access, network communication via curl/wget, shell command execution, and root-level system modification (SKILL.md, references/redroid.md).
Sanitization: The skill relies on the underlying parsing tools (e.g., Apktool, jadx) to handle the binary formats of the ingested files.

android-apk-patch