apk-redteam-pipeline

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). This skill contains concrete, actionable instructions to find and extract secrets from Android APKs and to bypass runtime protections (certificate pinning, Frida hooks, mitmproxy) that enable credential exfiltration and unauthorized access.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill explicitly instructs downloading APKs from uncontrolled third-party APK repositories (https://d.apkpure.net/b/APK/<package_id>?version=latest, apkmirror and apkpure web endpoints, and the legacy d-XX.winudf.com mirror), which are external mirrors that commonly host repackaged or tampered APKs and are not controlled by the target or a verified vendor, making these operational downloads suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests free text from outsider-authored sources by scraping/searching Play Store developer pages, APKMirror search result pages, and any customer-provided/externally found APK URLs (downloaded APK contents are then decompiled and grepped for secrets/URLs/JWTs).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs fetching APKs at runtime from https://d.apkpure.net/b/APK/<package_id>?version=latest (used to download apps that are later executed on a device/emulator) and downloading jadx from https://github.com/skylot/jadx/releases/latest/download/jadx-1.5.x.zip (a remote binary used to run decompilation), so these URLs are runtime external dependencies that result in executing remotely-fetched code.