frida-android-hooks
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides numerous JavaScript templates intended for runtime injection into Android applications using the Frida framework. This includes snippets using
Java.perform,Java.use, andJava.enumerateClassLoadersto modify app behavior dynamically.- [COMMAND_EXECUTION]: Instructions include shell commands forfridaandadbto control device state and initiate instrumentation processes on an attached Android device.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with and process data from external Android applications (method names, classes, data buffers), which represents a potential attack surface for untrusted data. - Ingestion points: Runtime class names, method arguments, and stack traces processed within
SKILL.mdandreferences/android-patterns.md. - Boundary markers: Not present.
- Capability inventory: Shell command execution via Frida and ADB CLI tools.
- Sanitization: Not present in the discovery and reconnaissance snippets.
Audit Metadata