Frida Mobile Security
index-login/MobileRE-Skill
用于 Android/iOS 移动应用安全逆向分析：Frida 动态插桩、绕过反调试/反注入/加固壳、脱壳、加密与 native SO 层 hook、运行时行为分析、jadx-mcp 静态攻击面分析、离线 SO 静态分析（ELF 侦察/字符串/交叉引用/反汇编/JNI 判型）。用户提到"绕过检测/闪退/脱壳/加密/抓包/行为摸底/内存扫描/分析 so/ELF…
Generate and inject Frida hooks for dynamic instrumentation — license bypass, SSL pinning bypass, function tracing, crypto interception, anti-debug bypass.
Install Frida Hooker
$ npx skills add ptn1411/skill --skill frida-hooker -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install ptn1411/skill frida-hooker --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/frida-hooker .claude/skills/frida-hooker && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "frida-hooker" agent skill from https://github.com/ptn1411/skill/tree/main/frida-hooker into .claude/skills/frida-hooker/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "frida-hooker", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/ptn1411/skill/tree/main/frida-hookerType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add ptn1411/skill --skill frida-hooker -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install ptn1411/skill frida-hooker --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .agents/skills && cp -r skills-src/frida-hooker .agents/skills/frida-hooker && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "frida-hooker" agent skill from https://github.com/ptn1411/skill/tree/main/frida-hooker into .agents/skills/frida-hooker/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "frida-hooker", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill frida-hooker -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install ptn1411/skill frida-hooker --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/frida-hooker .cursor/skills/frida-hooker && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "frida-hooker" agent skill from https://github.com/ptn1411/skill/tree/main/frida-hooker into .cursor/skills/frida-hooker/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "frida-hooker", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/ptn1411/skill.git --path frida-hooker--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add ptn1411/skill --skill frida-hooker -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install ptn1411/skill frida-hooker --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/frida-hooker .gemini/skills/frida-hooker && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "frida-hooker" agent skill from https://github.com/ptn1411/skill/tree/main/frida-hooker into .gemini/skills/frida-hooker/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "frida-hooker", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install ptn1411/skill frida-hookerInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add ptn1411/skill --skill frida-hooker -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .github/skills && cp -r skills-src/frida-hooker .github/skills/frida-hooker && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "frida-hooker" agent skill from https://github.com/ptn1411/skill/tree/main/frida-hooker into .github/skills/frida-hooker/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "frida-hooker", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill frida-hooker -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install ptn1411/skill frida-hooker --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/frida-hooker .opencode/skills/frida-hooker && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "frida-hooker" agent skill from https://github.com/ptn1411/skill/tree/main/frida-hooker into .opencode/skills/frida-hooker/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "frida-hooker", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
frida-hooker- GitHub stars
- 219
- Token cost
- ~983 tokens
- SKILL.md length
- 233 words
- Files
- 9 (incl. scripts, references)
- Skills in repo
- 22
- Repo updated
- First seen
- Licence
- None found
At a glance
Generate and inject Frida hooks for dynamic instrumentation — license bypass, SSL pinning bypass, function tracing, crypto interception, anti-debug bypass.
- Works in 3 steps: Authorization & Routing → Generate Hooks → Inject and Run
- Tasks that involve Mobile application security
- SKILL.md covers 0. Authorization & Routing, Step 1 — Generate Hooks, Step 2 — Inject and Run and Available Templates, plus 2 more sections
- Runs JavaScript and Python scripts from its folder; calls python and pip
What it does
Frida Hooker is an agent skill from ptn1411/skill. Generate and inject Frida hooks for dynamic instrumentation — license bypass, SSL pinning bypass, function tracing, crypto interception, anti-debug bypass. Supports attach and spawn modes.
Its SKILL.md is about 980 tokens, which your agent loads only when the skill is triggered. The skill folder holds 11 other files, including scripts and reference files (for example `references/frida_patterns.md`, `scripts/generate_hooks.py` and `scripts/run_frida.py`).
It sits in Security, covering Mobile application security. It works with Frida. The repository describes itself as: Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ…
When your agent uses it
- Tasks that involve Mobile application security
Example prompts
- “/frida-hooker”
Requirements
- Python 3
- Node.js
- Pre-approved tools (allowed-tools): Read, Write, Edit, Glob, Grep, Bash
Workflow steps
3 steps, taken from the step headings in SKILL.md.
- Authorization & Routing
- Generate Hooks
- Inject and Run
What it can do on your machine
Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves these tools, so the agent can use them without asking each time:
ReadWriteEditGlobGrepBash
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 2 files in scripts/ (JavaScript and Python), which the agent can run.
Shell commands in SKILL.md call:
pythonpip
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use pip, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Frida Hooker loads about 983 tokens when it runs, and up to ~2.1k if it reads all its reference files. Until then it costs about 50 tokens; SKILL.md has 233 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
allowed-tools: Read, Write, Edit, Glob, Grep, Bash
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 233 words (~983 tokens).
- name
- frida-hooker
- allowed-tools
- Read, Write, Edit, Glob, Grep, Bash
Files
SKILL.md and 8 other files (scripts, references) in frida-hooker of ptn1411/skill.
- SKILL.md
- references/frida_patterns.md
- scripts/generate_hooks.py
- scripts/run_frida.py
- templates/anti_debug_bypass.js
- templates/crypto_intercept.js
- templates/function_tracer.js
- templates/license_bypass.js
- templates/ssl_pinning_bypass.js
Open the folder on GitHubat commit ce2b65e
Compare with similar skills
Frida Hooker next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Frida Hooker this skillptn1411/skill | 219 | — | ~983 | Automated safety check: Notes | None | |
| Frida Mobile Securityindex-login/MobileRE-Skill | 152 | — | ~3k | Automated safety check: Pass | MIT | |
| Mira Risk Collectvw2x/Mira | 105 | — | ~793 | Automated safety check: Pass | GPL-3.0 | |
| Rev Unicorn Debugindex-login/MobileRE-Skill | 152 | — | ~1.9k | Automated safety check: Pass | MIT | |
| Mira Article Updatervw2x/Mira | 105 | — | ~637 | Automated safety check: Pass | GPL-3.0 | |
| Rev Dex Dumperindex-login/MobileRE-Skill | 152 | — | ~1.9k | Automated safety check: Pass | MIT |
Similar skills
Mira Risk Collect
vw2x/Mira
Run Mira environment risk collection. An agent skill from vw2x/Mira.
Rev Unicorn Debug
index-login/MobileRE-Skill
Debug and emulate specific code fragments or functions using the Unicorn engine.
Mira Article Updater
vw2x/Mira
Update Mira topic articles from cases and patterns. An agent skill from vw2x/Mira.
Rev Dex Dumper
index-login/MobileRE-Skill
Root memory dump of DEX from a running Android app: no injection, no ptrace (survives ptrace-blocking anti-debug; invisible to Frida checks), twin tools cross-check each other.
Mira Case Capture
vw2x/Mira
Capture Mira detection experiments locally, then distill selected evidence into a tracked case only when the user explicitly requests promotion into a report or the knowledge repository.
More from ptn1411/skill
All 22 skills in this repoAndroid APK Pentester
ptn1411/skill
Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.
Electron App Security Analyzer
ptn1411/skill
Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.
Electron Builder Unpacker
ptn1411/skill
Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.
Javascript Deobfuscator
ptn1411/skill
Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.
Web App Scanner
ptn1411/skill
Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…
Dotnet Decompiler
ptn1411/skill
Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.
Related
Works with
Categories
Questions about Frida Hooker
What does Frida Hooker do?
Generate and inject Frida hooks for dynamic instrumentation — license bypass, SSL pinning bypass, function tracing, crypto interception, anti-debug bypass. Frida Hooker is an agent skill from ptn1411/skill. Generate and inject Frida hooks for dynamic instrumentation — license bypass, SSL pinning bypass, function tracing, crypto interception, anti-debug bypass.
When should I use Frida Hooker?
Frida Hooker fits situations like: tasks that involve Mobile application security.
How do I install Frida Hooker in Claude Code?
Run `npx skills add ptn1411/skill --skill frida-hooker -a claude-code`. Or copy the skill folder (frida-hooker in ptn1411/skill) into .claude/skills/frida-hooker in your project. Claude Code loads it when a task matches its description.
How do I install Frida Hooker in Codex?
Run `npx skills add ptn1411/skill --skill frida-hooker -a codex`. Or copy the skill folder (frida-hooker in ptn1411/skill) into .agents/skills/frida-hooker in your project. Codex loads it when a task matches its description.
Can I use Frida Hooker in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill frida-hooker -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/frida-hooker, .gemini/skills/frida-hooker, .github/skills/frida-hooker and .opencode/skills/frida-hooker in your project.
What does Frida Hooker need to run?
Going by SKILL.md and its folder, Frida Hooker needs JavaScript and Python for the scripts in its folder and the command-line tools its instructions call (python and pip). Our summary lists: Python 3; Node.js. Its frontmatter pre-approves these tools: Read, Write, Edit, Glob, Grep, Bash.
Does Frida Hooker access the network?
SKILL.md contains no URLs. Its commands use pip, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Frida Hooker safe to install?
Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Frida Hooker use?
No licence was found for Frida Hooker or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Frida Hooker use?
About 983 tokens (SKILL.md is roughly 3.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.1k tokens, read only when the agent opens those files.
What are the alternatives to Frida Hooker?
Skills that share tags, products or a category with Frida Hooker: Frida Mobile Security (index-login/MobileRE-Skill, 152 stars), Mira Risk Collect (vw2x/Mira, 105 stars), Rev Unicorn Debug (index-login/MobileRE-Skill, 152 stars) and Mira Article Updater (vw2x/Mira, 105 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Frida Hooker?
ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 219 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.
Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.