From cybersec-toolkit
Performs static analysis of Android APK malware using apktool, jadx, and androguard to extract permissions, suspicious API calls, and C2 indicators.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersec-toolkit:analyzing-android-malware-with-apktoolThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Android malware distributed as APK files can be statically analyzed to extract permissions, activities, services, broadcast receivers, and suspicious API calls without executing the sample. This skill uses androguard for programmatic APK analysis, identifying dangerous permission combinations, obfuscated code patterns, dynamic code loading, reflection-based API calls, and network communication ...
Android malware distributed as APK files can be statically analyzed to extract permissions, activities, services, broadcast receivers, and suspicious API calls without executing the sample. This skill uses androguard for programmatic APK analysis, identifying dangerous permission combinations, obfuscated code patterns, dynamic code loading, reflection-based API calls, and network communication indicators.
androguardnpx claudepluginhub 26zl/cybersec-toolkit --plugin cybersec-toolkitPerforms static analysis of Android APK malware using apktool, jadx, and androguard to extract permissions, suspicious API calls, and C2 indicators.
Performs static analysis of Android APK malware using apktool for decompilation, jadx for Java source recovery, and androguard for permissions, manifest, and suspicious API detection.
Performs static analysis on Android APK malware using apktool for decompilation, jadx for Java source recovery, and androguard for permissions, manifest checks, suspicious APIs, and risk reports.