androidstudio-app-pentest-environment
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities fit its stated pentest purpose, and the main documented installs mostly point to real project-controlled sources. However, it equips an AI agent with offensive mobile-testing techniques and asks users to execute a third-party rootAVD script plus multiple unpinned release artifacts, creating meaningful supply-chain and misuse risk despite no clear credential theft or covert data exfiltration.
Confidence: 88%Severity: 69%
Audit Metadata