apk-redteam-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the jadx analysis tool from an external GitHub repository (skylot/jadx) and fetches APK files from third-party hosting services like apkpure.net and apkmirror.com which are not verified sources.- [COMMAND_EXECUTION]: Executes various shell utilities for automation, including curl for web scraping Google Play, grep for pattern matching sensitive strings, openssl for certificate analysis, and package managers (pip, brew) for environment setup.- [REMOTE_CODE_EXECUTION]: Installs and runs external security tools such as frida-tools and objection that interact with mobile devices and execute instrumentation scripts on the system.- [INDIRECT_PROMPT_INJECTION]: Analyzes untrusted Android application packages (APKs) by extracting and displaying internal strings and decompiled code to the agent. This data could contain malicious payloads designed to influence the AI agent's behavior. \n
- Ingestion points: External APK files and scraped web content from app stores. \n
- Boundary markers: No explicit delimiters or instructions are used to separate untrusted APK data from agent instructions. \n
- Capability inventory: Full access to shell commands, network operations (curl, wget), and local file management (unzip, 7z). \n
- Sanitization: String extraction via grep and strings is performed without sanitizing the content for potential injection attacks.
Audit Metadata