Skill UI

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

This skill guides the comprehensive packaging and deployment of applications built with Makepad. It covers building for multiple target platforms, including desktop (Windows, macOS, Linux), mobile (Android, iOS), and WebAssembly. Use this guide when setting up CI/CD pipelines, generating distributable installers (.deb, .dmg, .apk, .ipa), or automating release artifacts using tools like cargo-packager and cargo-makepad.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

A comprehensive guide for statically analyzing suspicious Android APKs. This skill demonstrates how to use JADX, apktool, and androguard to decompile Java/Kotlin source code, examine manifest permissions, and identify malicious patterns. Use this to detect data exfiltration, C2 command and control communication, privilege escalation, and overlay attacks in mobile threats.

A specialized downstream skill for complex CTF challenges, focusing on cryptographic analysis, steganography, and mobile system forensics. It guides the user through recovering complex data chains, such as decoding blobs, tracing cryptographic transforms (keys, IVs, nonces), inspecting hidden media payloads, and analyzing mobile trust boundaries (e.g., APK/IPA signing logic, local storage, SSL pinning). This skill is designed to be used only after a main sandbox orchestrator has established the operational context.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

A comprehensive framework for reverse engineering compiled, obfuscated, packed, or virtualized targets. This process is crucial for understanding the internal workings of binaries, APKs, firmware, and custom VMs before exploitation or solution. It supports static and dynamic analysis using advanced tools like IDA, Ghidra, and angr, covering complex anti-analysis techniques and deep code structure analysis.

This skill provides a CLI-based workflow for Android APK reverse engineering. It covers APK unpacking, Java decompilation, smali modification, repackaging, Frida dynamic hooking, and optional native .so analysis. It leverages local tools such as jadx, apktool, frida, adb, ida-reverse, and radare2. Useful for analyzing login, signature, security, root detection, or certificate verification logic in Android apps, always in an authorized context.

Provides IDA Pro reverse engineering capabilities for analyzing binaries, PE/ELF/APK/DLL/SO files, firmware, and malware. Supports decompilation, password discovery, vulnerability analysis, and software cracking workflows. Uses deterministic scripts for HTTP server management and file opening to avoid known MCP schema and lock issues.

An end-to-end pipeline for Android APK security assessment, including inventory, acquisition, decompilation, and secret pattern analysis. Requires explicit authorization for authorized security engagements.

A comprehensive toolkit for Android APK reverse engineering, including unpacking, decompilation, smali modification, repacking, signing, and dynamic hooking with Frida. Supports Java and native .so analysis using tools like jadx, apktool, and adb. Designed for authorized security assessments and educational purposes.

This skill enables packaging and deploying Makepad applications across multiple platforms including Desktop, Android, iOS, and Web. It covers using cargo-packager and cargo-makepad for creating installers like .deb, .dmg, .apk, and .ipa. It also guides on setting up GitHub Actions for CI/CD workflows and managing resources for distribution.