reversing-xamarin-maui

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical guide for mobile application security assessments, focusing on the extraction and decompilation of .NET assemblies from mobile packages.
  • [EXTERNAL_DOWNLOADS]: Mentions the use of standard third-party libraries and tools, specifically the lz4 Python package and the pyxamstore utility, which are required for processing Xamarin-specific binary formats.
  • [COMMAND_EXECUTION]: Provides instructions for using common security utilities such as unzip, binwalk, apktool, and apksigner to analyze and modify mobile application files.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted binary data from mobile application packages.
  • Ingestion points: Target APK and IPA files are ingested and processed by the agent using various extraction tools.
  • Boundary markers: No specific boundary markers are implemented to separate the untrusted binary content from the agent's instructional context.
  • Capability inventory: The skill utilizes shell commands for file extraction, binary carving, and assembly unpacking, alongside Python scripts for data decompression.
  • Sanitization: No sanitization is performed on the content of the mobile binaries before they are processed or decompiled.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 01:16 AM
Security Audit — agent-trust-hub — reversing-xamarin-maui