The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the androguard Python library and references standard analysis tools like apktool and jadx for reverse engineering tasks. These are industry-standard tools for cybersecurity research.
[INDIRECT_PROMPT_INJECTION]: The skill performs static analysis on untrusted APK files, which is a potential surface for indirect prompt injection. Ingestion points: scripts/agent.py accepts an APK file path for analysis. Boundary markers: The output is structured as JSON, though no explicit delimiters are used within the strings. Capability inventory: The script is limited to static analysis and does not perform network operations or dynamic code execution based on the APK content. Sanitization: The script limits the number of extracted strings (e.g., URLs and IP addresses) to prevent large data injections into the AI context.

analyzing-android-malware-with-apktool