apk-redteam-pipeline

SUSPICIOUS. The skill is internally coherent for an offensive mobile red-team workflow, but its footprint is high-risk by design: it installs multiple external offensive tools, fetches APKs from third-party mirror sites, captures runtime traffic, and validates extracted secrets against live services. The behavior fits the stated purpose, so this is not confirmed malware, but it is not proportionate for general-use agent environments and should be treated as a high-risk offensive capability.