androidstudio-app-pentest-environment

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities fit its stated pentest purpose, and the main documented installs mostly point to real project-controlled sources. However, it equips an AI agent with offensive mobile-testing techniques and asks users to execute a third-party rootAVD script plus multiple unpinned release artifacts, creating meaningful supply-chain and misuse risk despite no clear credential theft or covert data exfiltration.

Confidence: 88%Severity: 69%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fandroidstudio-app-pentest-environment%2F@5f40aaec91567dbea751a1a48fc8002c34caa7279105c6b7c33bd256366dab3f