MCP App StoreMCP App Store
from android-pentesting-skill319
Comprehensive Android APK security audit with static/dynamic analysis, source-to-sink tracing, and CVSS 4.0 reporting.
This skill provides a deterministic 6-phase workflow for conducting thorough security audits of Android APKs. It combines static analysis (decompilation, manifest audit, secrets detection) with dynamic instrumentation to identify vulnerabilities, from simple hardcoded secrets to complex IPC and intent injection flaws.
Use this skill when a user provides an APK for review, asks to analyze decompiled Android source, needs help with mobile vulnerability assessments, or wants to bypass runtime protections like SSL pinning and root detection.
scope.json and findings.json to ensure reproducible and high-quality audits.Designed for agents with shell access and tool execution capabilities, such as Codex, Claude Code, or any agent capable of running the Android SDK, Frida, and Objection.
This skill has not been reviewed by our automated audit pipeline yet.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Code Spec Backfill
Identify missing function-level contracts and backfill docstrings and type annotations; report ambiguous gaps with misuse scenarios. Incremental, state-driven w
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Android Bluetooth
Controls Android Bluetooth/BLE: status, power, scanning, connect/disconnect, and permission recovery for device workflows.
CLS-Certify — Skill Security Auditor
Enterprise-grade multi-dimensional security scanner for Agent Skills that produces S+/S/A/B/C/D ratings and structured HTML/PDF reports.
IGF (Grapefruit) CLI
CLI skill to control the IGF (Grapefruit) dynamic instrumentation server for mobile security testing: enumerate Frida devices, inspect apps, run hooks, access f
Security Research Meta-Methodology
A structured vulnerability research framework distilled from 5600+ security docs, covering web injection, deserialization, binary exploitation, domain pentest,
rsbkb (Rust BlackBag)
Collection of fast CLI applets for binary data manipulation, encoding/decoding, checksums, compression, and reverse-engineering workflows.