apk-redteam-pipeline

The skill is internally coherent for Android red-team work, and its install paths are mostly legitimate. However, it gives an AI agent high-risk offensive-security capabilities: APK acquisition from third-party mirrors, secret extraction, cert-pinning bypass, traffic interception, and follow-on credential/API testing. This is not confirmed malware, but it is a dangerous security tool whose scope and real-world impact are substantial.