The Agent Skills Directory

[COMMAND_EXECUTION]: The skill orchestrates several analysis tools including jadx, dex2jar, and aapt. These executions are performed inside a containerized environment to isolate the analysis from the host system.
[EXTERNAL_DOWNLOADS]: The Dockerfile fetches jadx and dex2jar from GitHub. These downloads are version-pinned and verified with SHA-256 checksums to ensure integrity and prevent the use of altered assets.
[DATA_EXFILTRATION]: The skill implements significant protections against data leakage by running the analysis container with --network none. Furthermore, scripts like extract-strings.sh and find-api-calls.sh include explicit redaction logic to mask tokens and API keys found in the source code before they are exposed to the agent context.
[SAFE]: The skill includes comprehensive security documentation and explicitly requires user confirmation of authorization and scope before starting any analysis tasks.

apk-analysis