skills/mukul975/anthropic-cybersecurity-skills/conducting-mobile-app-penetration-test/Gen Agent Trust Hub
conducting-mobile-app-penetration-test
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript utilizes thesubprocessmodule to execute external CLI tools for mobile security analysis. These tools includeapktoolfor decompiling Android applications,stringsfor searching for hardcoded sensitive data within binaries, andadbfor interacting with Android devices to inspect filesystem data and application package configurations. - [EXTERNAL_DOWNLOADS]: The script uses the
requestslibrary to perform network communication with external API endpoints. This is used to test for authorization vulnerabilities and evaluate the enforcement of certificate pinning. The requests are performed with SSL verification disabled (verify=False), which is consistent with the tool's intended use in a controlled security testing environment.
Audit Metadata