# dragonjar-android-pentesting-skill

Performs static and dynamic Android APK security checks, bypasses client protections with Frida, and scores findings against MASVS.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 916 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/dragonjar-android-pentesting-skill/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/dragonjar-android-pentesting-skill

## What it does

This skill guides AI agents through auditing Android packages. It decompiles binaries via `jadx` and `apktool`. Then it checks AndroidManifest settings against 50+ baseline rules and Semgrep MASTG checks. When inspecting React Native builds, it extracts `index.android.bundle` to spot leaked tokens.

Dynamic testing relies on 37 Frida scripts. The bundled runner detects 18 defense categories, covering RootBeer, emulator flags, and commercial RASP engines like DexGuard or Talsec. Reusable profiles let you test SSL pinning and root detection bypasses during a single run.

External binaries must be configured beforehand, specifically `apktool`, `jadx`, and `frida-tools`. Local Frida scripts cannot forge server-side verification like Play Integrity. You need an authorized test tenant on the backend to test those flows.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill dragonjar-android-pentesting-skill -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/dragonjar-android-pentesting-skill/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/dragonjar-android-pentesting-skill/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill dragonjar-android-pentesting-skill -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/dragonjar-android-pentesting-skill/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill dragonjar-android-pentesting-skill -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/dragonjar-android-pentesting-skill/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills dragonjar-android-pentesting-skill
```

2. **Manually: put the files in place**
- File: `.github/skills/dragonjar-android-pentesting-skill/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill dragonjar-android-pentesting-skill -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/dragonjar-android-pentesting-skill
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/dragonjar-android-pentesting-skill/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill dragonjar-android-pentesting-skill -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/dragonjar-android-pentesting-skill/SKILL.md

## When to use it
- Discover hardcoded API secrets inside bytecode or React Native bundles
- Bypass root detection and SSL certificate pinning using Frida scripts
- Detect active RASP mechanisms and emulator checks in an APK
- Calculate MASVS compliance scores with CVSS 4.0 vulnerability ratings

## Example prompts
- Audit this Android APK for security vulnerabilities using Semgrep
- Detect RASP protections on com.example.app and run Frida bypass scripts
- Generate a pentesting report with MASVS scoring for this APK

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 69 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md