skills.rest
xwtro0tk1t-cloud
xwtro0tk1t-cloudCOMMUNITY
Explore all skills by this author →
GitHub

android-vuln-analyzer

Automates end-to-end Android vulnerability analysis including reproduction, hunting, and SAST verification.

316|42|Updated Apr 5, 2026
Search Tags:#automation#security#vulnerability#sast#android#hunt
One-click install
npx skills add https://github.com/xwtro0tk1t-cloud/harness --skill android-vuln-analyzer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: android-vuln-analyzer
Source: https://github.com/xwtro0tk1t-cloud/harness/tree/main/bundled-skills/android-vuln-analyzer
Command: npx skills add https://github.com/xwtro0tk1t-cloud/harness --skill android-vuln-analyzer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill automates end-to-end Android vulnerability analysis, enabling reproduction of known issues, targeted vulnerability hunting, and SAST verification in a single workflow.

Core Features & Use Cases

  • Reproduce vulnerabilities from CVEs, bug bounty reports, or disclosures with guided prompts.
  • Perform targeted hunts (SQL injection, WebView, hardcoded secrets, etc.) using pre-built hunt patterns.
  • Verify SAST alerts across MobSF, SonarQube, AI SAST, and Qark with a 7-step workflow, enabling PoC generation and dynamic testing.

Quick Start

Run the environment setup script to install prerequisites, then execute the analyzer against your APK to start end-to-end vulnerability analysis.

Frequently Asked Questions about android-vuln-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Android vulnerability analysis from APK to PoC generation?▼

Automate Android vulnerability analysis by running the environment setup script to install prerequisites like adb and jadx, then execute the analyzer against your APK to guide end-to-end reproduction and PoC generation.

What is the best way to verify SAST alerts for Android applications?▼

The best way to verify SAST alerts is using a 7-step workflow that integrates MobSF, SonarQube, AI SAST, and Qark results, enabling dynamic testing and PoC generation for your Android application.

Can I reproduce vulnerabilities from CVEs and bug bounty reports automatically?▼

Yes, you can reproduce vulnerabilities from CVEs, bug bounty reports, or disclosures automatically by applying guided prompts and pre-built hunt patterns to analyze the targeted Android APK.

Do I need adb and jadx installed to perform targeted Android vulnerability hunting?▼

Yes, you need adb, jadx, and openssl installed to perform targeted Android vulnerability hunting, alongside access to hunts and SKILL.md guidelines to direct the analysis workflow.

What pre-built hunt patterns are available for Android vulnerability hunting?▼

Pre-built hunt patterns are available for targeted vulnerabilities including SQL injection, WebView exploits, and hardcoded secrets, allowing teams to systematically uncover issues within the Android application.

Why does Android vulnerability analysis require access to hunts and SKILL.md guidelines?▼

Android vulnerability analysis requires access to hunts and SKILL.md guidelines because these resources provide the structured patterns and instructions necessary to accurately guide reproduction, hunting, and SAST verification workflows.

Related Skills

Explore More Software Engineering Skills→
asnar00asnar00
1

eos-deploy-usb

Build and deploy Android APKs to USB-connected devices via ADB.

Community
Advanced
xwtro0tk1t-cloudxwtro0tk1t-cloud
316

Web Vulnerability Analysis Skill

Route web vulnerability analysis through CAI agents and HexStrike.

Community
Advanced
endorlabsendorlabs
2

endor-sast

Detect and report code-level security vulnerabilities in source code via Endor CLI SAST scans.

Official
Advanced
salmanabdurrahmansalmanabdurrahman

mobile-android-static

Analyze Android APK and AAB artifacts for security vulnerabilities.

Community
Advanced