Borrowing it
Nothing to install: this file belongs to zhaji2333/CkSKILLS. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zhaji2333/CkSKILLS/main/.agents/skills/android-security-audit/SKILL.mdgit clone --depth 1 https://github.com/zhaji2333/CkSKILLSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhaji2333/ckskills/android-security-audit)<a href="https://agentmods.dev/skills/zhaji2333/ckskills/android-security-audit"><img src="https://agentmods.dev/badge/skills/zhaji2333/ckskills/android-security-audit.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00232 | $0.13427 |
| Opus 5 | $0.00116 | $0.06714 |
| Sonnet 5 | $0.00046 | $0.02685 |
| Haiku 4.5 | $0.00023 | $0.01343 |
Grade C, and why
android-security-audit scanned grade C with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Cloud metadata endpointmediumServer-side request forgery
One request to 169.254.169.254 can return temporary IAM credentials.
- 请求 URL 来自外部输入（Intent extras、Deep Link 参数）时，攻击者可指向 `http://127.0.0.1`、`http://10.0.0.1`、云元数据 `http://169.254.169.254`。 Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Recursive force deletemediumDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
Runtime.getRuntime().exec("cat " + filename); // filename = "; rm -rf /" 即可注入 Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- ✅ **Frida 边界**：允许作**密钥/签名追踪的取证工具**（见 一、密钥追踪专项）；最终 PoC 必须用提取的密钥直接构造签名请求（Python/curl），不依赖 Frida；报告不写 Frida，写密钥硬编码 + 接口未鉴权。 How it starts
The opening of the file, as written. The whole thing — 987 lines — stays where its author put it; the contents beside it link to each section on GitHub.
android-security-audit — Android APK 组件安全深度审计
与
miniprogram-security的分工：本技能专注 Android APK 组件安全 + 无 Frida/无 Root 漏洞验证 的深度挖掘（对标小米 HyperOS 等厂商 SRC 收录标准）；小程序（微信/支付宝/抖音）与微信云开发见miniprogram-security。两者命中同一目标时，先用本技能出组件安全结论，再按需联动。
何时调用（触发条件）
- 拿到 APK，需要系统化组件安全审计（静态分析 → 动态验证 → PoC → 报告）
- 目标是预装应用 / 厂商系统应用（HyperOS/MIUI、安全中心、设置、工程模式、OTA、诊断工具）
- 需要在无 Root / 无 Frida 环境下完成漏洞验证（ADB + PoC App + 恶意 HTML）
- 发现导出组件、Intent 重定向、PendingIntent、WebView/JSBridge、ContentProvider、Binder、Deep Link 可疑点
- 需要按厂商 SRC 移动端收录标准（等级划分/忽略清单/报告要求）评估漏洞价值并写报告
⚠️ 核心原则
攻击视角定义
- 远程攻击 (Remote)：无需安装 App / 接触设备，通过网页、链接、消息触发。评级更高。
- 本地攻击 (Local)：需安装 PoC App、使用 ADB 或物理接触。
- ✅ ADB / PoC App / 恶意 HTML 均为合法验证手段。
- ❌ 禁止依赖 Frida / Hook / Root 作为漏洞利用核心（厂商官方标记为忽略类）。
- ✅ Frida 边界：允许作密钥/签名追踪的取证工具（见 一、密钥追踪专项）；最终 PoC 必须用提取的密钥直接构造签名请求（Python/curl），不依赖 Frida；报告不写 Frida，写密钥硬编码 + 接口未鉴权。
- 不强制依赖抓包工具：JADX 静态分析 + ADB 动态验证即可完成全流程（弱加密/HTTP 明文如需抓包佐证，另行配置代理工具）。
证据纪律（Agent 防幻觉，强制）
- 不编造代码、文件名、路径——只报告 JADX / ADB 实际输出的内容。
- 字符串匹配 ≠ 证明执行——grep 命中只是入口，必须验证调用路径与可及性（是否 exported、是否有权限保护、是否校验来源）。
- 每个发现必须标注：漏洞类型 / 证据来源（文件路径+行号）/ 攻击向量（远程/本地）/ 评级依据。
快速导航
| 任务 | 直达章节 |
|---|---|
| 5 分钟快速上手 | → 快速开始 |
| 🔴 密钥追踪 → 未授权接口（最高优先级） | → 一、密钥追踪专项 |
| 全量静态审计 | → 二、静态分析（2.1~2.17） |
| 发现漏洞，要动态验证 | → 三、动态验证 |
| 构建 PoC App | → 四、PoC 开发规范 |
| 判断发现值不值得报 | → 五、忽略清单与分流 |
| 写漏洞报告（正式 DOCX 提交稿） | → 调用 report 技能 |
| 通用加固清单 | → 七、通用修复建议 |
📚 参考资源
在进行特定模块审计前，必须优先阅读对应的参考指南（resources/）：
| 审计模块 | 参考文档 |
|---|---|
| 平台基础 | Android平台概览.md |
| 数据存储安全 | Android数据存储.md |
| 网络通讯安全 | Android网络通讯.md |
| 加密与密钥管理 | Android加密API.md |
| 平台 API 安全 | Android平台API.md |
| 本地认证机制 | Android本地认证.md |
| 逆向与篡改防护 | Android篡改和逆向工程.md |
| 反逆向防御 | Android反逆向防御.md |
| 代码质量与构建 | Android代码质量和构建设置.md |
| 基础安全测试 | Android基础安全测试.md |
What ships with it
10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- resources/Android代码质量和构建设置.md 34 KB
- resources/Android加密API.md 33 KB
- resources/Android反逆向防御.md 85 KB
- resources/Android基础安全测试.md 81 KB
- resources/Android平台API.md 133 KB
- resources/Android平台概览.md 62 KB
- resources/Android数据存储.md 110 KB
- resources/Android本地认证.md 21 KB
- resources/Android篡改和逆向工程.md 164 KB
- resources/Android网络通讯.md 39 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 987 lines · 232 tokens per session scan C 6dae93e58829
android-security-audit is a skill published in the GitHub repository zhaji2333/CkSKILLS (76 stars, last pushed 6d ago), licensed MIT. It adds 232 tokens to every session and 13,427 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it C with 3 findings (cloud metadata endpoint, recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
xcode-build-orchestrator
Orchestrate Xcode build optimization by benchmarking first, running the specialist analysis skills, prioritizing findings, requesting explicit approval, delegating approved fixes to xcode-build-fixer, and re-benchmarking after changes. Use when a developer wants an end-to-end build optimization workflow, asks to speed…
spm-build-analysis
Analyze Swift Package Manager dependencies, package plugins, module variants, and CI-oriented build overhead that slow Xcode builds. Use when a developer suspects packages, plugins, or dependency graph shape are hurting clean or incremental build performance, mentions SPM slowness, package resolution time, build…
xcode-project-analyzer
Audit Xcode project configuration, build settings, scheme behavior, and script phases to find build-time improvements with explicit approval gates. Use when a developer wants project-level build analysis, slow incremental builds, guidance on target dependencies, build settings review, run script phase analysis…
appstore-review-checker
Audit iOS/macOS apps against App Store Review Guidelines before submission, with evidence-backed verdicts and fixes. Don't use for Google Play, general code review, or rejection appeals.
dagger-hilt-expert
Expert guidance for Dagger and Hilt dependency injection in Android. Use when implementing DI, creating modules, configuring scopes, optimizing performance, testing with Hilt, setting up multi-module architecture, using assisted injection, or debugging DI issues. Triggers on "dagger", "hilt", "dependency injection"…
android-startup-optimizer
Expert Android app startup performance optimization skill. Use when analyzing or improving Android app cold start, warm start, or hot start times. Applies to projects using Jetpack Compose, Hilt/Dagger, ContentProviders, ad SDKs, or any Android initialization bottlenecks. Triggers on phrases like "startup time", "app…