The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes shell scripts (scripts/android_ca_inject.sh, scripts/component_fuzz.sh) that use the Android Debug Bridge (adb) to execute commands on a connected mobile device, including starting activities, services, and querying content providers.
[PRIVILEGE_ESCALATION]: scripts/android_ca_inject.sh utilizes su (root) and nsenter to inject CA certificates into the Zygote mount namespace on Android devices. This high-privilege operation is a documented requirement for intercepting TLS traffic on Android 14 and 15.
[DYNAMIC_EXECUTION]: The skill uses Frida scripts (scripts/universal_unpin.js, scripts/ios_bypass_suite.js) for runtime instrumentation to bypass security controls like SSL pinning, root detection, and biometric authentication during security assessments.
[INDIRECT_PROMPT_INJECTION]: The static analysis script scripts/manifest_attack_surface.py uses the defusedxml library to parse Android manifests, which is a recommended practice to mitigate XML External Entity (XXE) vulnerabilities when processing untrusted application files.
[DATA_EXPOSURE]: The skill provides documentation and automation for extracting data from local storage (SQLite, SharedPreferences, iOS Keychain), which is intended for identifying insecure storage vulnerabilities in mobile applications.

mobile-pentest