reversing-react-native-apps
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill describes legitimate reverse engineering workflows for security auditing purposes.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx js-beautifyto format JavaScript bundles, which fetches the package from the official NPM registry.\n- [COMMAND_EXECUTION]: It employs standard command-line utilities for mobile app analysis, includingapktool,apksigner,frida, andobjection.\n- [DATA_EXFILTRATION]: Provides instructions to search for sensitive information like API keys and tokens within application bundles as part of a security assessment.\n- [PROMPT_INJECTION]: The skill processes untrusted mobile application files (.apk,.ipa,.bundle).\n - Ingestion points: Reads from
target.apkandindex.android.bundleinSKILL.md.\n - Boundary markers: Absent.\n
- Capability inventory: Includes
apktool,apksigner,frida, andhbctoolfor file manipulation and execution inSKILL.md.\n - Sanitization: Absent.
Audit Metadata