The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the jadx decompilation tool from a third-party GitHub repository (skylot/jadx). It also uses pip to install unversioned packages such as frida-tools and objection.
[DATA_EXFILTRATION]: The skill performs network operations using curl to connect to third-party APK repositories including apkpure.net and apkmirror.com. These domains are not included in the standard set of whitelisted locations for data transfer.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data extracted from Android application files (APKs), such as application manifests, strings, and certificates.
Ingestion points: APK binary files, extracted AndroidManifest.xml, and strings from DEX files.
Boundary markers: No delimiters or warnings are used to isolate untrusted content from the agent's instructions.
Capability inventory: The pipeline employs multiple system-level capabilities including network access via curl, file system manipulation, and instrumentation via adb and frida.
Sanitization: Regular expression filtering is used to extract specific data patterns, providing limited validation of the ingested content.
[COMMAND_EXECUTION]: Automated execution of numerous shell utilities (curl, wget, grep, unzip, 7z, openssl, apktool, adb, frida, objection) is configured to process and analyze mobile application files.

apk-redteam-pipeline