The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides procedures for running multiple command-line security tools, including frida, objection, apktool, ghidra, otool, and jtool2, which are standard for mobile security assessments.\n- [DYNAMIC_EXECUTION]: Instructions include the deployment of Frida instrumentation scripts to modify the runtime behavior of mobile applications, specifically for bypassing security controls like SSL pinning and root detection using provided templates.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of untrusted mobile application artifacts (APKs, IPAs, smali, and source code) which represent ingestion points for external data.\n
Ingestion points: Processes application binaries and source code through static and dynamic analysis tools like jadx and androguard.\n
Boundary markers: Implements a mandatory confirmation gate requiring user target definition and authorization verification before performing offensive operations.\n
Capability inventory: Extensive CLI-based analysis capabilities and runtime instrumentation targeting mobile platforms.\n
Sanitization: Relies on human-in-the-loop validation of tool outputs and target scope.\n- [EXTERNAL_DOWNLOADS]: Mentions various external tools and GitHub repositories for mobile security testing, such as androguard, APKLeaks, and frida-ios-dump. These are documented as part of the toolchain for authorized security assessments and originate from well-known community sources.

mobile-reverse