skills.rest
yfe404
yfe404COMMUNITY
Explore all skills by this author →
GitHub

frida-stalker-android

Trace Android native execution with Frida Stalker and collect ordered call events.

6|1|Updated Feb 12, 2026
Search Tags:#tracing#instrumentation#android#native#frida#stalker
One-click install
npx skills add https://github.com/yfe404/frida-stalker-skills --skill frida-stalker-android
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: frida-stalker-android
Source: https://github.com/yfe404/frida-stalker-skills/tree/main
Command: npx skills add https://github.com/yfe404/frida-stalker-skills --skill frida-stalker-android

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Trace native Android execution to collect call activity, event streams, and optional instrumentation using Frida Stalker, enabling actionable insights with low overhead.

Core Features & Use Cases

  • Low-overhead call summaries using Frida Stalker.
  • Ordered events via onReceive + Stalker.parse().
  • Template-driven instrumentation with transform support and module filtering for Android apps.
  • Safe start/stop patterns that minimize impact on running apps.

Quick Start

Install the skill and start tracing a target thread or module on Android using the provided templates.

Frequently Asked Questions about frida-stalker-android

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does Frida Stalker collect ordered events on Android?▼

Frida Stalker collects ordered events on Android by using onReceive combined with Stalker.parse() to capture and parse execution event streams from ARM/ARM64 native code, providing actionable insights into call activity.

Can I apply Frida Stalker instrumentation only to specific Android modules?▼

Yes, you can apply template-driven Frida Stalker instrumentation with transform support and module filtering to Android apps. This restricts tracing to specific native modules, significantly reducing overhead in real running applications.

Do I need a specific Frida version to trace Android native execution?▼

Yes, tracing Android native execution with Frida Stalker requires Frida 17+ JavaScript semantics. You also need a root SKILL.md with YAML frontmatter containing name and description, plus optional scripts and references to adapt templates.

What is the safest way to start and stop native code tracing on a running Android app?▼

The safest way to start and stop native code tracing on Android is using the provided safe start/stop patterns. These patterns minimize impact on running apps by carefully managing the Frida Stalker lifecycle during call activity collection.

Why does my Frida Stalker trace cause high overhead on Android?▼

High overhead during Android native execution tracing usually occurs when module filtering is not applied. Use the template-driven instrumentation with transform support and module filtering to restrict Stalker scope and minimize impact on real apps.

Related Skills

Explore More Software Engineering Skills→
hardw00thardw00t
90

android-pentest

Automate Android app pentesting with static APK analysis and Frida instrumentation.

Community
Advanced
TrainLCDTrainLCD
71

argent-native-profiler

Profile native CPU hotspots and memory leaks in iOS and Android apps.

Official
Advanced
woxiangyangzhimaowoxiangyangzhimao
3

app-reverse

Identify and decode encrypted parameters from Android and iOS applications.

Community
Advanced
chicanoandres702chicanoandres702

event-sourcing-architect

Guide event-sourced system architecture, projections, and saga orchestration.

Community
Advanced