Skill UI

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

This skill guides the comprehensive packaging and deployment of applications built with Makepad. It covers building for multiple target platforms, including desktop (Windows, macOS, Linux), mobile (Android, iOS), and WebAssembly. Use this guide when setting up CI/CD pipelines, generating distributable installers (.deb, .dmg, .apk, .ipa), or automating release artifacts using tools like cargo-packager and cargo-makepad.

A comprehensive tool for performing static analysis on Android APK malware samples. It utilizes androguard, apktool, and jadx to detect dangerous permission combinations, suspicious API calls (like reflection or crypto), dynamic code loading patterns, and extract Indicators of Compromise (IOCs) for robust security incident response and threat hunting.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

A comprehensive guide for reverse engineering Android malware. It details how to use JADX and accompanying tools (apktool, androguard) to analyze APK metadata, extract permissions, decompile Java/Kotlin source code, and identify malicious functionalities like data exfiltration, C2 communication, and overlay attacks. Ideal for mobile threat analysis and security research.

Napkin gives Copilot CLI users a browser whiteboard to draw, sketch, and add sticky notes; Copilot reads snapshots and JSON data, then replies with analysis, suggestions, and next steps for business-oriented thinkers.