Skill UI

This skill provides an end-to-end pipeline for Android APK security assessments. It includes inventorying developer apps, acquiring APKs from sources like APKPure, decompiling DEX files using jadx, and searching for hardcoded secrets like API keys and internal IPs. Suitable for authorized bug bounty engagements and red team operations targeting mobile applications.

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

A disciplined approach for red teaming and security assessments, emphasizing scope authorization, impact verification, and data minimization. Ensures thorough coverage without over-extraction or premature stopping during authorized engagements.

A structured client-facing format for red-team engagements and penetration testing reports. Includes standardized sections for findings, severity assessment, impact analysis, and proof of concept. Suitable for delivering reports to CISOs and technical stakeholders requiring DOCX/PDF output.