skills.rest
balsm-health
balsm-healthOFFICIAL
Explore all skills by this author →
Website𝕏@balsm_healthGitHub

exploiting-deeplink-vulnerabilities

Test Android and iOS deep links for injection and redirect vulnerabilities.

2|Updated Jun 5, 2026
Search Tags:#vulnerability assessment#ios#android#penetration-testing#deep-links#mobile-security
One-click install
npx skills add https://github.com/balsm-health/Balsm-AI --skill exploiting-deeplink-vulnerabilities
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: exploiting-deeplink-vulnerabilities
Source: https://github.com/balsm-health/Balsm-AI/tree/main/plugin/skills/exploiting-deeplink-vulnerabilities
Command: npx skills add https://github.com/balsm-health/Balsm-AI --skill exploiting-deeplink-vulnerabilities

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill assesses mobile app deep link handling for injection and redirect vulnerabilities, testing Android intent filters and iOS URL scheme handlers for unauthorized access.

Core Features & Use Cases

  • Deep Link Analysis: Identifies unauthorized access, data injection, intent hijacking, and redirect manipulation.
  • Mobile App Security: Use for security assessments of Android and iOS mobile applications.
  • Use Case: Assess the attack surface of a mobile app for custom URI schemes, Android App Links, iOS Universal Links, or intent-based navigation.

Quick Start

To test the security of a mobile app's deep links, analyze the AndroidManifest.xml and Info.plist files using the provided scripts.

Frequently Asked Questions about exploiting-deeplink-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test deep link vulnerabilities in mobile apps?▼

Test deep link vulnerabilities by analyzing AndroidManifest.xml and Info.plist files to identify unauthorized access, data injection, intent hijacking, and redirect manipulation in Android and iOS applications. Provided scripts automate this security assessment.

What security risks are associated with custom URL schemes in iOS?▼

Custom URL schemes in iOS introduce risks of unauthorized access, data injection, and redirect manipulation. Testing URL scheme handlers reveals vulnerabilities where malicious inputs can hijack app navigation or inject unintended data.

Can I use this to assess Android App Links and intent filters?▼

Yes, you can assess Android App Links and intent filters. The Skill tests Android intent filters to identify intent hijacking and unauthorized access vulnerabilities within mobile applications during penetration testing.

How do I prevent intent hijacking in Android intent filters?▼

Prevent intent hijacking by analyzing your AndroidManifest.xml to identify vulnerable intent filters. This Skill's scripts detect unauthorized access and redirect manipulation paths, enabling you to secure intent-based navigation against malicious deep links.

Does this Skill support penetration testing for both iOS and Android deep links?▼

Yes, this Skill supports penetration testing for both iOS and Android. It tests iOS Universal Links and URL schemes alongside Android App Links to identify deep link vulnerabilities across mobile platforms.

What files do I need to start a deep link security assessment?▼

You need the AndroidManifest.xml file for Android apps and the Info.plist file for iOS apps. Analyzing these configuration files with the provided scripts identifies deep link handling vulnerabilities like data injection and intent hijacking.

Related Skills

Explore More Software Engineering Skills→
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate
damacusdamacus
2

security-reviewer

Review codebases for vulnerabilities and generate structured security audit reports.

Community
Advanced
utsavthakurutsavthakur

ios-pentesting-tricks

Extract keychain data and analyze iOS binary protections for authorized security assessments.

Community
Advanced
AcczdyAcczdy
2

conducting-mobile-app-penetration-test

Test iOS and Android apps for vulnerabilities using OWASP MASTG.

Community
Advanced