android-targeted-assessment

What problem does it solve?

This skill eliminates the need for manual, ad-hoc Android APK security testing by providing a structured, depth-first workflow that delivers concise, evidence-backed semantic findings instead of generic scanner warnings, along with tiered validation plans aligned to authorization scopes.

Core Features & Use Cases

• Targeted APK Triage: Performs full inventory, decompilation, and source/sink analysis for individual APKs, with special handling for React Native, Flutter, hybrid, and commercially protected apps.
• Semantic Finding Generation: Produces structured vulnerability hypotheses with scanner gap labels, trust-boundary analysis, and explicit impact assessment, avoiding low-value generic alerts.
• Use Case: A mobile security researcher assessing a new cryptocurrency wallet APK can use this skill to identify deep link misconfigurations, WebView JavaScript interface flaws, and backend validation requirements in a single targeted report.

Quick Start

Use the android-targeted-assessment skill to perform a deep security assessment of the provided Android APK file and generate a structured, evidence-backed vulnerability report with tiered validation steps.