performing-mobile-app-certificate-pinning-bypass

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The Python scripts scripts/agent.py and scripts/process.py utilize the subprocess module to execute command-line tools including apktool, frida, objection, and adb. These tools are necessary for the skill's documented workflow of decompiling mobile apps, managing device configurations, and performing dynamic instrumentation.
  • [EXTERNAL_DOWNLOADS]: The skill documentation advises users to install frida-tools and objection via the Python package manager. These are well-known, trusted, and widely-used open-source tools within the cybersecurity research community.
  • [DYNAMIC_EXECUTION]: The skill employs Frida to perform dynamic instrumentation, injecting JavaScript hooks into mobile application processes. This functionality is used to override SSL validation methods at runtime, which is the primary and intended purpose of the skill for security testing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:52 PM