Android-Pentesting-Skill

Comprehensive Android APK security audit with static analysis, dynamic instrumentation, source-to-sink tracing, IPC/component abuse analysis, and CVSS 4.0 reporting. Covers decompilation, manifest analysis, deep links and intent injection, secrets detection, crypto analysis, Frida/Objection integration, and APK repackaging. Use when user says "audit APK", "analyze android app", "mobile pentest", "APK security", "decompile APK", "android vulnerability assessment", "reverse engineer android", "modify APK", "intent injection", "deep link abuse", "bypass SSL pinning", "bypass root detection", or p

Try your first task

Run a basic authorized APK audit

Start a fresh conversation.

Using Android-Pentesting-Skill, perform a basic security audit of the authorized APK at /path/to/app.apk. Start with the default static workflow, report only findings with traced context, and mark anything requiring runtime testing as "Needs Dynamic Confirmation."

Required inputs

Replace /path/to/app.apk with the local path to an APK you are authorized to assess.
Install and verify the documented toolchain prerequisites before starting.

Suggested template by Skill Leaderboard, grounded in the linked source. Task evidence ↗

Inside SKILL.md

1043 lines

Section content has not been verified for this skill yet.

Full source remains withheld under the current source-display policy. Read the author’s source ↗