testing-mobile-ipc

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses industry-standard mobile security tools including adb, apktool, drozer, and frida for their intended diagnostic and auditing purposes.
  • [SAFE]: The command examples provided for testing activities, services, and content providers use placeholder domains (target.example, attacker.example) and standard Android/iOS shell syntax without any hidden or malicious payloads.
  • [SAFE]: The skill focuses on identifying common mobile vulnerabilities like path traversal and intent redirection by searching local decompiled source code using ripgrep (rg), which is a benign forensic activity.
  • [SAFE]: External network interaction is limited to verifying standard security configuration files such as Android App Links (assetlinks.json) and iOS Universal Links (apple-app-site-association), which are official mechanisms for verifying app ownership of domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 01:16 AM
Security Audit — agent-trust-hub — testing-mobile-ipc