skills.rest
dreadnode
dreadnodeOFFICIAL
Explore all skills by this author →
Website𝕏@dreadnodeGitHub

android-corpus-prep

Aggregate AndroZoo and Google Play metadata into DuckDB-queryable Parquet corpora.

11|1|Updated May 4, 2026
Search Tags:#provenance#android#duckdb#apk#corpus#mobile-security#androzoo
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill android-corpus-prep
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: android-corpus-prep
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/android-apk-research/skills/android-corpus-prep
Command: npx skills add https://github.com/dreadnode/capabilities --skill android-corpus-prep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyarrow, duckdb, and includes scripts (resource) components.

What problem does it solve?

Manually gathering, filtering, and tracking the provenance of Android APKs for analysis is time-consuming, error-prone, and lacks reproducibility, making it difficult to build consistent, well-documented test corpora.

Core Features & Use Cases

  • Metadata aggregation and fast querying: Fetches AndroZoo and Google Play metadata, converts large gzipped sources to compressed Parquet for low-memory, high-speed DuckDB queries.
  • Popular APK selection: Filters for high-quality, popular apps based on download count, star rating, and malware detection status to build targeted corpora.
  • Bulk download with provenance: Downloads APKs from Google Play or AndroZoo with per-pass manifests that track source, SHA256 hash, version, selection reason, and file path for full auditability.
  • Use Case: A mobile security researcher building a corpus of popular financial apps can filter the pre-built popular APK candidate set for wallet-related packages, download the selected APKs, and generate a complete manifest to feed into downstream decompilation and vulnerability scanning workflows.

Quick Start

Use the android-corpus-prep skill to build a curated corpus of popular financial Android APKs with full provenance tracking for security analysis.

Frequently Asked Questions about android-corpus-prep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a reproducible Android APK corpus for security analysis?▼

You can build a reproducible Android APK corpus by aggregating AndroZoo metadata into compressed Parquet, filtering for popular apps using DuckDB, and bulk downloading APKs with per-pass manifests that track source, SHA256 hash, and version.

Can I use DuckDB to query multi-gigabyte Android APK metadata efficiently?▼

Yes, DuckDB supports fast, low-memory querying of multi-gigabyte APK metadata by converting large gzipped AndroZoo metadata sources into compressed Parquet format for high-speed analysis.

What is the best way to track provenance when downloading APKs from AndroZoo?▼

The best way to track provenance is generating per-pass manifests during bulk APK downloads that record the source, SHA256 hash, version, selection reason, and file path for full auditability.

How do I filter Android APKs by popularity and malware detection status?▼

You can filter Android APKs by popularity and malware detection status by querying the pre-built popular APK candidate set in DuckDB, applying conditions for download count, star rating, and detection status.

Does this APK corpus preparation workflow require PyArrow?▼

Yes, PyArrow is required as a dependency alongside DuckDB to enable the conversion of large gzipped metadata sources into compressed Parquet files for efficient querying.

Related Skills

Explore More Software Engineering Skills→
crossxwillcrossxwill
5

duckdb-parquet-lab-workflow

Query Parquet data with DuckDB and convert results to pandas DataFrames.

Community
Intermediate
alicangnllalicangnll

Android Exploit

Decompile Android APK files and analyze bytecode for vulnerabilities.

Community
Advanced
OpenSenseNovaOpenSenseNova
4.9k

sn-da-large-file-analysis

Convert large Excel datasets to Parquet using streaming techniques.

Official
Advanced
guaidao2guaidao2
81

apktool

Decode Android APK resources, manifests, smali code, and packaging metadata.

Community
Intermediate