reversing-xamarin-maui
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical guide for mobile application security assessments, focusing on the extraction and decompilation of .NET assemblies from mobile packages.
- [EXTERNAL_DOWNLOADS]: Mentions the use of standard third-party libraries and tools, specifically the
lz4Python package and thepyxamstoreutility, which are required for processing Xamarin-specific binary formats. - [COMMAND_EXECUTION]: Provides instructions for using common security utilities such as
unzip,binwalk,apktool, andapksignerto analyze and modify mobile application files. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted binary data from mobile application packages.
- Ingestion points: Target APK and IPA files are ingested and processed by the agent using various extraction tools.
- Boundary markers: No specific boundary markers are implemented to separate the untrusted binary content from the agent's instructional context.
- Capability inventory: The skill utilizes shell commands for file extraction, binary carving, and assembly unpacking, alongside Python scripts for data decompression.
- Sanitization: No sanitization is performed on the content of the mobile binaries before they are processed or decompiled.
Audit Metadata