The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill facilitates root access on Android emulators using commands such as adb root and adb shell su, and provides instructions to mount system partitions as writable via adb remount. It also involves modifying sensitive system configuration files like build.prop and the system-wide certificate store.
[REMOTE_CODE_EXECUTION]: The skill clones an external repository from GitLab (newbit/rootAVD) and executes a shell script (rootAVD.sh) with root privileges to modify the device's ramdisk.
[EXTERNAL_DOWNLOADS]: Fetches multiple binaries, frameworks, and modules from external sources, including Magisk, LSPosed, and Frida-server, primarily from GitHub and GitLab.
[DYNAMIC_EXECUTION]: Utilizes the Frida dynamic instrumentation framework to inject code into running Android processes for runtime hooking and to bypass security mechanisms like SSL pinning.
[PERSISTENCE]: Configures Magisk and LSPosed modules that remain active across reboots, maintaining root access and traffic interception capabilities.
[COMMAND_EXECUTION]: Includes automated scripts for certificate management and application analysis that execute shell commands and Python code.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted third-party APK files and intercepted network traffic for analysis, creating a surface for potential injection attacks through application data, as it lacks explicit sanitization or boundary markers for external content.

android-app-pentest-environment