skills.rest
dreadnode
dreadnodeOFFICIAL
Explore all skills by this author →
Website𝕏@dreadnodeGitHub

android-targeted-assessment

Assess individual Android APKs with evidence-backed semantic findings.

11|1|Updated May 4, 2026
Search Tags:#static analysis#penetration testing#android#mobile security#apk#decompilation#semantic findings
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill android-targeted-assessment
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: android-targeted-assessment
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/android-apk-research/skills/android-targeted-assessment
Command: npx skills add https://github.com/dreadnode/capabilities --skill android-targeted-assessment

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill eliminates the need for manual, ad-hoc Android APK security testing by providing a structured, depth-first workflow that delivers concise, evidence-backed semantic findings instead of generic scanner warnings, along with tiered validation plans aligned to authorization scopes.

Core Features & Use Cases

  • Targeted APK Triage: Performs full inventory, decompilation, and source/sink analysis for individual APKs, with special handling for React Native, Flutter, hybrid, and commercially protected apps.
  • Semantic Finding Generation: Produces structured vulnerability hypotheses with scanner gap labels, trust-boundary analysis, and explicit impact assessment, avoiding low-value generic alerts.
  • Use Case: A mobile security researcher assessing a new cryptocurrency wallet APK can use this skill to identify deep link misconfigurations, WebView JavaScript interface flaws, and backend validation requirements in a single targeted report.

Quick Start

Use the android-targeted-assessment skill to perform a deep security assessment of the provided Android APK file and generate a structured, evidence-backed vulnerability report with tiered validation steps.

Frequently Asked Questions about android-targeted-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a deep security assessment of an Android APK?▼

To perform a deep security assessment of an Android APK, use this skill to execute full inventory, decompilation, and source/sink triage. It generates evidence-backed semantic findings and tiered validation plans instead of generic scanner warnings.

What is semantic finding generation in mobile security testing?▼

Semantic finding generation in mobile security testing produces structured vulnerability hypotheses with explicit impact assessment and trust-boundary analysis. This approach eliminates low-value generic alerts by providing concise, evidence-backed security reports.

Does APK decompilation work with React Native and Flutter apps?▼

Yes, APK decompilation works with React Native and Flutter apps. This skill includes special handling for hybrid frameworks and commercially protected apps to ensure thorough source/sink analysis during targeted security reviews.

What's the best way to triage deep link misconfigurations in an Android APK?▼

The best way to triage deep link misconfigurations and WebView JavaScript interface flaws is using a structured depth-first workflow. This skill identifies backend validation requirements and provides scanner gap labels for individual APK targets.

Can I generate tiered validation plans aligned to authorization scopes for penetration testing?▼

Yes, you can generate tiered validation plans aligned to authorization scopes for penetration testing. The skill outputs structured vulnerability hypotheses with explicit runtime-specific analysis and validation steps tailored to your authorized testing boundaries.

Related Skills

Explore More Software Engineering Skills→
alicangnllalicangnll

Android Exploit

Decompile Android APK files and analyze bytecode for vulnerabilities.

Community
Advanced
79yuuki79yuuki

pentest

Plan authorized penetration tests and generate assessment reports for web, API, and infrastructure targets.

Community
Advanced
dether-netdether-net
2

surface

Analyze Dethernety threat models to generate attack surface summaries.

Official
Advanced
salmanabdurrahmansalmanabdurrahman

mobile-android-static

Analyze Android APK and AAB artifacts for security vulnerabilities.

Community
Advanced