The Agent Skills Directory

[SAFE]: The skill provides standard security auditing procedures for mobile applications. All tools mentioned (Frida, objection, apktool, jadx, checksec) are well-known instruments in the mobile security domain. The code snippets and command templates are consistent with legitimate penetration testing practices.
[COMMAND_EXECUTION]: The skill provides instructions for the agent to use local command-line tools such as apktool, frida, codesign, and dsymutil. These commands are used as intended for inspecting and interacting with mobile application binaries.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external mobile application artifacts (APKs, IPAs, manifests, and decompiled source code), which constitutes a vulnerability surface.
Ingestion points: AndroidManifest.xml, iOS entitlements, decompiled Java/Swift source code, and binary symbol tables (via nm or dsymutil).
Boundary markers: None explicitly provided to separate app content from agent instructions.
Capability inventory: File system access (read/write), shell command execution, and runtime instrumentation via Frida.
Sanitization: The skill relies on standard tool outputs and does not specify additional sanitization or filtering of application data.
[EXTERNAL_DOWNLOADS]: The skill references a GitHub repository (github.com/fridayy/frida-scripts) for community Frida scripts. This is documented for informational purposes and does not involve automated remote code execution.

mobile-resilience