android-pentesting-tricks

This fragment is a set of Frida scripts intended for offensive Android testing/instrumentation that bypasses SSL pinning, evades root detection, suppresses biometric authentication failures, and extracts sensitive data (SharedPreferences contents, cryptographic keys, plaintext/ciphertext, intent extras, WebView URLs/headers/JS, and method arguments/returns). The explicit no-op/exception-throwing hooks and widespread console logging of secrets are strong indicators of malicious capability. Treat as high-risk and do not use in production or trusted pipelines without strict review and isolation.

SUSPICIOUS: the skill is internally coherent as an Android pentesting guide, but its actual function is to give an AI agent offensive security capabilities, including exploitation and bypass techniques. Provenance for core tools is mixed but mostly recognizable; the larger issue is that the skill materially expands attack capability and chains into other skills.