skills/mukul975/anthropic-cybersecurity-skills/performing-mobile-app-certificate-pinning-bypass/Gen Agent Trust Hub
performing-mobile-app-certificate-pinning-bypass
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts
scripts/agent.pyandscripts/process.pyutilize thesubprocessmodule to execute command-line tools includingapktool,frida,objection, andadb. These tools are necessary for the skill's documented workflow of decompiling mobile apps, managing device configurations, and performing dynamic instrumentation. - [EXTERNAL_DOWNLOADS]: The skill documentation advises users to install
frida-toolsandobjectionvia the Python package manager. These are well-known, trusted, and widely-used open-source tools within the cybersecurity research community. - [DYNAMIC_EXECUTION]: The skill employs Frida to perform dynamic instrumentation, injecting JavaScript hooks into mobile application processes. This functionality is used to override SSL validation methods at runtime, which is the primary and intended purpose of the skill for security testing.
Audit Metadata