Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.
$ npx skills add ptn1411/skill --skill android-apk-pentester -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install ptn1411/skill android-apk-pentester --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/android-apk-pentester .claude/skills/android-apk-pentester && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "android-apk-pentester" agent skill from https://github.com/ptn1411/skill/tree/main/android-apk-pentester into .claude/skills/android-apk-pentester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "android-apk-pentester", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/ptn1411/skill/tree/main/android-apk-pentesterType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add ptn1411/skill --skill android-apk-pentester -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install ptn1411/skill android-apk-pentester --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .agents/skills && cp -r skills-src/android-apk-pentester .agents/skills/android-apk-pentester && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "android-apk-pentester" agent skill from https://github.com/ptn1411/skill/tree/main/android-apk-pentester into .agents/skills/android-apk-pentester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "android-apk-pentester", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill android-apk-pentester -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install ptn1411/skill android-apk-pentester --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/android-apk-pentester .cursor/skills/android-apk-pentester && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "android-apk-pentester" agent skill from https://github.com/ptn1411/skill/tree/main/android-apk-pentester into .cursor/skills/android-apk-pentester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "android-apk-pentester", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/ptn1411/skill.git --path android-apk-pentester--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add ptn1411/skill --skill android-apk-pentester -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install ptn1411/skill android-apk-pentester --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/android-apk-pentester .gemini/skills/android-apk-pentester && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "android-apk-pentester" agent skill from https://github.com/ptn1411/skill/tree/main/android-apk-pentester into .gemini/skills/android-apk-pentester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "android-apk-pentester", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install ptn1411/skill android-apk-pentesterInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add ptn1411/skill --skill android-apk-pentester -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .github/skills && cp -r skills-src/android-apk-pentester .github/skills/android-apk-pentester && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "android-apk-pentester" agent skill from https://github.com/ptn1411/skill/tree/main/android-apk-pentester into .github/skills/android-apk-pentester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "android-apk-pentester", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill android-apk-pentester -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install ptn1411/skill android-apk-pentester --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/android-apk-pentester .opencode/skills/android-apk-pentester && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "android-apk-pentester" agent skill from https://github.com/ptn1411/skill/tree/main/android-apk-pentester into .opencode/skills/android-apk-pentester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "android-apk-pentester", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
android-apk-pentesterRuns a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.
The skill is built for authorized testing of Android apps packaged as a plain APK, an XAPK, or a split bundletool APKS archive. Five scripted phases carry it out: setting up an emulator with adb root and a pushed frida-server; extracting manifest metadata, permissions, DEX strings, native libraries and protection indicators; installing a plain, split or bundletool package; applying lab emulator property changes that must be reapplied after every cold boot since they live only in memory; and injecting a mitmproxy certificate into the system trust store to configure the device's proxy. A references file goes deeper into detection vectors, certificate injection and APK format differences.
A separate script generates Frida scripts for SSL-pinning tests, crypto logging and detection validation, and every run can produce an analysis JSON report, a manifest of the generated hooks, and optional mitmproxy capture output. Practical notes call for a dry run before changing an emulator, bundletool for APKS archives, system-level certificate injection since Android 7 and later usually ignores user-added certificates, and physical devices for targets that rely on hardware-backed attestation.
Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Ships 6 files in scripts/ (Python), which the agent can run.
Shell commands in SKILL.md call:
pythonadbFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Android APK Pentester loads about 917 tokens when it runs, and up to ~2.5k if it reads all its reference files. Until then it costs about 64 tokens; SKILL.md has 283 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
Without a licence we can't republish the file, so here is its outline and opening line. It has 283 words (~917 tokens).
“Use this skill for authorized Android application security testing. It supports static APK/XAPK/APKS analysis, split APK installation, rooted emulator setup, traffic interception, and Frida hook generation for lab validation.”
SKILL.md and 9 other files (scripts, references) in android-apk-pentester of ptn1411/skill.
Open the folder on GitHubat commit ce2b65e
Android APK Pentester next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Android APK Pentester this skillptn1411/skill | 220 | — | ~917 | Automated safety check: Pass | None | |
| Conducting Mobile App Penetration Testmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3.2k | Automated safety check: Pass | Apache-2.0 | |
| APK Static Analysisdslsdzc/rev-skills | 130 | — | ~2k | Automated safety check: Pass | Apache-2.0 | |
| Performing Dynamic Analysis Of Android Appmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.2k | Automated safety check: Warn | Apache-2.0 | |
| Performing Android App Static Analysis With Mobsfmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~1.8k | Automated safety check: Pass | Apache-2.0 | |
| Performing iOS App Security Assessmentmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 |
mukul975/Anthropic-Cybersecurity-Skills
Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network…
dslsdzc/rev-skills
Guides static analysis of an Android APK with jadx and apktool: reading the manifest, Java code, resources and permissions, and recognizing hardening or obfuscation.
mukul975/Anthropic-Cybersecurity-Skills
Performs runtime dynamic analysis of Android applications using Frida, Objection, and Android Debug Bridge to observe application behavior during execution, intercept function calls, modify runtime…
mukul975/Anthropic-Cybersecurity-Skills
Performs automated static analysis of Android applications using Mobile Security Framework (MobSF) to identify hardcoded secrets, insecure permissions, vulnerable components, weak cryptography, and…
mukul975/Anthropic-Cybersecurity-Skills
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…
SnailSploit/Claude-Red
Mobile (Android + iOS) application penetration testing methodology.
ptn1411/skill
Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.
ptn1411/skill
Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.
ptn1411/skill
Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.
ptn1411/skill
Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…
ptn1411/skill
Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.
ptn1411/skill
A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.
Works with
Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation. The skill is built for authorized testing of Android apps packaged as a plain APK, an XAPK, or a split bundletool APKS archive. Five scripted phases carry it out: setting up an emulator with adb root and a pushed frida-server; extracting manifest metadata, permissions, DEX strings, native libraries and protection indicators; installing a plain, split or bundletool package; applying lab emulator property changes that must be reapplied after every cold boot since they live only in memory; and injecting a mitmproxy certificate into the system trust store to configure the device's proxy.
Android APK Pentester fits situations like: setting up a rooted Android emulator for authorized app security testing; statically analyzing an APK, XAPK or APKS bundle's manifest and permissions; intercepting an app's network traffic with mitmproxy in a lab emulator; generating Frida hooks to test SSL pinning or emulator detection in a lab.
Run `npx skills add ptn1411/skill --skill android-apk-pentester -a claude-code`. Or copy the skill folder (android-apk-pentester in ptn1411/skill) into .claude/skills/android-apk-pentester in your project. Claude Code loads it when a task matches its description.
Run `npx skills add ptn1411/skill --skill android-apk-pentester -a codex`. Or copy the skill folder (android-apk-pentester in ptn1411/skill) into .agents/skills/android-apk-pentester in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill android-apk-pentester -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/android-apk-pentester, .gemini/skills/android-apk-pentester, .github/skills/android-apk-pentester and .opencode/skills/android-apk-pentester in your project.
Going by SKILL.md and its folder, Android APK Pentester needs Python for the scripts in its folder and the command-line tools its instructions call (python and adb). Our summary lists: Python, to run the bundled scripts; Android SDK tooling and an emulator or rooted device; Frida and mitmproxy; bundletool.jar, for APKS archives.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
No licence was found for Android APK Pentester or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
About 917 tokens (SKILL.md is roughly 3.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.6k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Android APK Pentester: Conducting Mobile App Penetration Test (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), APK Static Analysis (dslsdzc/rev-skills, 130 stars), Performing Dynamic Analysis Of Android App (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Performing Android App Static Analysis With Mobsf (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 220 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.
Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
