The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill uses sudo apt install to verify and install required system utilities such as apktool, jadx, and binwalk. This requires the agent to have sudo access, granting elevated privileges during the tool setup phase.
[INDIRECT_PROMPT_INJECTION]: The skill processes and extracts strings from decompiled APK source code and manifest files provided by the user. This exposes the agent to untrusted data that could contain malicious instructions designed to alter the analysis results or the final report.
Ingestion points: Decompiled Java/Kotlin source files in the jadx_out/ directory and decoded XML/smali files in apktool_out/.
Boundary markers: The instructions lack explicit boundary markers or warnings to the agent to disregard instructions found within the processed code.
Capability inventory: The skill utilizes grep, ripgrep, and strings to collect data which is then interpreted by the agent to build a comprehensive security report.
Sanitization: There is no evidence of sanitization or filtering of the content extracted from the APK before it is analyzed by the agent.

droid-recon