skills.rest
DragonJARDragonJARCommunity·1 Agent Skills Included

Android-Pentesting-Skill

Automated Android APK security audits and vulnerability reporting

Audits Android APKs for vulnerabilities through static analysis, dynamic instrumentation, and source-to-sink data flow tracing. Detects hardcoded secrets, exported components, weak crypto, and insecure network configurations without manual reverse engineering. Bypasses SSL pinning and root detection with ready-made Frida scripts, then scores findings with CVSS 4.0 and MASVS mapping. Generates professional security reports with proof-of-concept exploits for every confirmed issue.
330|49
↗
npx skills add DragonJAR/Android-Pentesting-Skill --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators
📦 In Repo
DragonJARDragonJAR

Android-Pentesting-Skill

Analyze Android APKs for security vulnerabilities and generate bypass scripts.

Community
Advanced

Frequently Asked Questions

FAQPage Schema
How to install Android-Pentesting-Skill?▼

Run `npx skills add DragonJAR/Android-Pentesting-Skill --all -g -y` in your terminal to install the skill globally. You will also need APKTool, JADX, Frida, and the Android SDK, which the included preflight script verifies for you.

How to audit an Android APK for vulnerabilities?▼

Simply provide the APK file and ask for a security audit. The skill decodes the app, maps its attack surface, traces data flows, and reports confirmed vulnerabilities with severity scores and proof-of-concept exploits.

Can it bypass SSL pinning and root detection?▼

Yes. It includes ready-made Frida scripts to bypass SSL pinning, root detection, biometric checks, and common RASP protections in authorized test environments.

Does it work with Flutter and React Native apps?▼

Yes. It automatically detects cross-platform frameworks like Flutter, React Native, Cordova, and Unity, then applies framework-specific analysis such as JavaScript bundle scanning and BoringSSL hooking.

Do I need security experience to use it?▼

No. The skill guides the analysis through a structured six-phase workflow and produces plain-language findings with CVSS scores, making results understandable for developers and auditors alike.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills