Inspect Android APKs from the command line to understand app logic, permissions, and components. Supports Java decompilation, low-level code edits, rebuilding and signing, plus Frida observation of running methods and routing to native code analysis.
中文简介正在准备中。当前显示英语简介。
- Inspecting APK entry points, components, and permissions
- Locating login, signing, and certificate checks
- Editing smali code and rebuilding an APK
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Inspect suspicious Android APK files without running them. Analyze permissions, app components, suspicious code patterns, and network indicators, then produce a JSON risk report to support malware triage and detection rule development.
中文简介正在准备中。当前显示英语简介。
- Triage suspicious APK files without running them
- Inspect dangerous permission combinations and suspicious API calls
- Extract network indicators for malware detection rules
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Inspect Android apps for embedded credentials, internal API addresses, and components exposed to other apps. The skill guides APK acquisition, code inspection, and runtime traffic analysis to support a mobile security assessment.
中文简介正在准备中。当前显示英语简介。
- Inventory Android apps included in a security assessment
- Check APKs for embedded credentials and internal API addresses
- Review components that other apps can invoke
elementalsouls/Claude-BugHunter☆ 51832026年10月19日 更新
Inspect authorized Android APKs by unpacking files, reading decompiled Java, and observing runtime behavior with Frida. The skill also guides smali bytecode changes, rebuilding and signing packages, and deciding when native .so libraries need further analysis.
中文简介正在准备中。当前显示英语简介。
- Inspect APK code and application structure
- Review manifest permissions and components
- Observe runtime behavior with Frida
sickn33/agentic-awesome-skills☆ 4.8万2026年10月19日 更新
Check the current date and time in Pakistan Standard Time, which is UTC+5. The skill uses a bash command and presents a concise line containing the date, a 24-hour time, and the PKT label.
中文简介正在准备中。当前显示英语简介。
- Checking the current time in Pakistan
- Getting the date and time in PKT
- Displaying Pakistan time in a concise 24-hour format
shanraisshan/claude-code-best-practice☆ 6.8万2026年10月19日 更新
Add native macOS behavior when SwiftUI alone falls short. Choose a small AppKit bridge for views, windows, panels, or menus, while clarifying state ownership, data flow, and lifecycle risks that need validation.
中文简介正在准备中。当前显示英语简介。
- Wrapping an AppKit view for use in SwiftUI
- Adding window behavior or file open and save panels
- Handling menu validation and command routing
openai/plugins☆ 75212026年10月8日 更新
Guide an authorized Android security assessment from app inventory and APK acquisition to decompilation, embedded secret checks, exposed component review, runtime inspection, and network traffic analysis. The skill provides documentation and examples rather than bundled executable helpers.
中文简介正在准备中。当前显示英语简介。
- Inventory Android apps within an authorized scope
- Check APKs for embedded secrets and internal URLs
- Review exposed components and Firebase configuration
sickn33/agentic-awesome-skills☆ 4.8万2026年10月19日 更新
Scan Android APK files for Firebase configuration and access-control weaknesses in databases, storage, authentication, and cloud functions. Produce text and JSON reports with evidence, severity ratings, and suggested fixes for authorized security assessments.
中文简介正在准备中。当前显示英语简介。
- Auditing Firebase security in Android apps
- Checking unauthenticated database access
- Testing storage listing and write permissions
trailofbits/skills☆ 76632026年10月20日 更新
Analyze drug concentration and response data to calculate exposure, fit models of drug movement and effects, and simulate dosing schedules. Produces exploratory research results with explicit assumptions and diagnostic checks.
中文简介正在准备中。当前显示英语简介。
- Calculate exposure and half-life from concentration data
- Compare models of drug concentration over time
- Simulate dosing schedules for research
K-Dense-AI/scientific-agent-skills☆ 5.3万2026年10月19日 更新
Configure cryptographic key storage and operations through PKCS#11, a standard interface for security devices. Work with physical HSMs or SoftHSM2 for development to generate keys, sign data, encrypt information, and check key export restrictions.
中文简介正在准备中。当前显示英语简介。
- Configure protected key storage on a physical HSM
- Test PKCS#11 workflows with SoftHSM2
- Sign and encrypt data using keys stored inside an HSM
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Configure OAuth 2.0 authorization for web and mobile apps or service communication. Choose suitable flows, implement PKCE to protect authorization codes, limit permissions, and manage token storage, renewal, and revocation with security checks.
中文简介正在准备中。当前显示英语简介。
- Implement authorization with PKCE for web and mobile apps
- Configure authorization for service-to-service communication
- Review token storage, renewal, and revocation
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Analyze Android packages by decompiling them into readable code. Identify app structure, list API endpoints—the addresses used for network requests—and trace how screen actions reach those requests, producing source files and structured documentation.
中文简介正在准备中。当前显示英语简介。
- Investigating the internal structure of Android packages
- Listing API endpoints used by an app
- Tracing screen actions through to network requests
SimoneAvogadro/android-reverse-engineering-skill☆ 82292026年10月12日 更新
Refactor large macOS SwiftUI views into focused files and components. Clarify window state, selection, commands, and AppKit integration while preserving existing behavior and keeping the main layout stable as users change selections.
中文简介正在准备中。当前显示英语简介。
- Split oversized SwiftUI views
- Organize state for each window
- Extract toolbar and command logic
openai/plugins☆ 75212026年10月8日 更新
Test Android and iOS apps by capturing real app traffic and checking backend APIs. When traffic is blocked or cannot be replayed, use decompilation and runtime inspection to uncover endpoints, inspect secrets, or understand request signing.
中文简介正在准备中。当前显示英语简介。
- Capturing mobile app traffic and testing backend APIs
- Finding hidden API endpoints and embedded credentials
- Investigating certificate pinning that blocks traffic inspection
awarexone/Agentic-Bug-Hunter☆ 53812026年10月10日 更新
Solve sandboxed CTF security challenges by reconstructing encoding and encryption steps, extracting data hidden in media, and tracing mobile app signing or storage behavior. Preserve exact parameters and evidence to reproduce decoded content or signed requests.
中文简介正在准备中。当前显示英语简介。
- Reconstructing encoding and encryption chains in CTF challenges
- Extracting data hidden in images and other media
- Tracing APK or IPA request-signing logic
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Investigate how compiled or obfuscated programs work, including binaries, APKs, WASM, and firmware. Combine file inspection, decompilation, and observed execution to understand control flow, validation logic, and mechanisms that hinder analysis.
中文简介正在准备中。当前显示英语简介。
- Understanding unfamiliar compiled programs
- Investigating obfuscation and anti-debugging logic
- Solving CTF validation challenges
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from an authorized external red-team engagement where 7 APKs were pulled manually, 4 download attempts truncated, and a hardcoded JWT + 30 internal API endpoints were recovered from one of the apps. Use when target has a mobile app catalogue (Play Store developer page), when you find an APK URL hosted on a web server, or when post-recon mentions 'mobile app' in scope.
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
Trace OAuth and OIDC sign-in flows in a CTF sandbox, from redirects through token exchange to application acceptance. Show where tokens become a recognized identity or permission, and preserve the smallest reproducible flow.
中文简介正在准备中。当前显示英语简介。
- Trace sign-in redirects and callback parameters
- Inspect state, nonce, and PKCE validation
- Check how tokens become application identity or permissions
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Analyze Android apps in a CTF sandbox using static inspection and Frida hooks, which observe or alter running code. Trace request signing, local storage, and Java-to-native boundaries to reproduce a request accepted by the server.
中文简介正在准备中。当前显示英语简介。
- Tracing request-signing inputs and outputs
- Inspecting Java-to-native calls with runtime hooks
- Examining app settings, databases, and token storage
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Analyze Android and iOS apps through package inspection, code analysis, runtime observation, and network traffic review. Support authorized security testing of embedded secrets, certificate checks, device protection checks, and cryptographic behavior.
中文简介正在准备中。当前显示英语简介。
- Inspecting APK or IPA permissions and configuration
- Checking code for embedded keys and tokens
- Observing app behavior with Frida or Objection
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Integrate Apple Pay payments and Wallet passes using PassKit. Use when adding Apple Pay buttons, creating payment requests, handling payment authorization, adding passes to Wallet, configuring merchant capabilities, managing shipping/contact fields, or working with PKPaymentRequest, PKPaymentAuthorizationController, PKPaymentButton, AddPassToWalletButton, PKPass, PKAddPassesViewController, PKPassLibrary, Wallet pass distribution, or Apple Pay checkout flows for physical goods, real-world services, donations, and eligible recurring payments.
中文简介正在准备中。当前显示原文说明。
dpearson2699/swift-ios-skills☆ 12172026年8月1日 更新
Redpanda's Agentic Data Plane: governance infrastructure for building, running, and governing AI agents and MCP servers, plus a proxying AI Gateway for LLM providers, operated via `rpk ai` and the ADP API. Use when creating or managing AI agents (managed or self-managed) via `rpk ai agent` or `AgentRegistryService`; configuring MCP servers (remote or managed catalog, code mode, auth); setting up LLM providers or querying models via `rpk ai llm`/`rpk ai model` or the AI Gateway proxy; or configuring budgets, guardrails, or Cedar access-control policies through the governance APIs. Also covers reading agent transcripts and spending insights, and wiring OAuth clients or providers to the aigw Authorization Server. For the separate rpk cloud mcp control-plane MCP server, see `/redpanda:rpk-cloud`.
中文简介正在准备中。当前显示原文说明。
skillmds/skillmd☆ 2492026年10月14日 更新
ナッシュ均衡ソルバー。零和対戦 (ポケモン選出、構築マッチアップ、じゃんけん型メタ) の最適混合戦略、選出最適化 (pkdx select)、メタ乖離分析 (pkdx meta-divergence) を提供。「最適選出」「選出分布」「構築メタ」「対面ジャンケン」「使用率 vs 最適」等の質問時に使用。
中文简介正在准备中。当前显示原文说明。
pkdxtools/pkdx☆ 542026年9月28日 更新
Integrate Apple Pay payments and Wallet passes using PassKit. Use when adding Apple Pay buttons, creating payment requests, handling payment authorization, adding passes to Wallet, configuring merchant capabilities, managing shipping and contact fields, or working with PKPaymentRequest, PKPaymentAuthorizationController, PKPaymentButton, PKPass, PKAddPassesViewController, PKPassLibrary, or Apple Pay checkout flows.
中文简介正在准备中。当前显示原文说明。
JordanCoin/ios-skills-collection☆ 62026年9月10日 更新