Mobile Application Security
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of industry-standard security tools such as
apktool,jadx,apkid,frida, andobjectionfor decompiling and dynamically testing mobile applications. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and tool repositories from trusted security organizations including OWASP, Frida, and MobSF. These are well-known and reputable sources in the cybersecurity community.
- [SAFE]: The provided
scripts/apk_analyzer.pyscript is a utility for identifying security flaws in mobile apps, such as dangerous permissions and hardcoded API keys. It operates locally on analyzed files and does not exhibit malicious behavior. - Ingestion points: The script and instructions involve reading external application artifacts like Android manifests and decompiled source code (e.g., .java, .xml, .json files).
- Boundary markers: While no specific prompt delimiters are mentioned for the agent output, the skill focuses on reporting technical findings rather than executing instructions embedded in the analyzed code.
- Capability inventory: The skill utilizes file system access and shell command execution to perform its analysis tasks.
- Sanitization: The tool identifies potential secrets using regular expressions and does not execute the code it analyzes.
Audit Metadata