How do I install the Inspect Apk skill?

Run npx skillmds@latest add jason0404/inspect-apk in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Inspect Apk skill do?

Inspect an Android APK for release metadata, permissions, components, native libraries, size and security concerns It is listed under Security on SkillMD.

Is Inspect Apk safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Inspect Apk?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Inspect Apk free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Inspect Apk?

jason0404 (@jason0404) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Inspect Apk by jason0404 — Agent Skill

Name: Inspect Apk
Author: jason0404

File contents

Inspect the user's APK as an untrusted build artifact. Do not install or run it.

Workflow

Confirm the .apk path exists and record file name and file size.
Locate Android SDK tooling cross-platform: try tools available in PATH, then locations discoverable through ANDROID_HOME, then any path supplied by the user. Never hard-code a macOS path.
Invoke android-apk-analyzer.
Use apkanalyzer where available to gather package/version, manifest data, permissions, DEX/resources/files, ABI libraries and major size contributors.
Invoke android-apk-signing-verifier when signature confirmation is requested or needed for release delivery.
Invoke android-artifact-report-generator when the user requests a report or final deliverable.

Rules

Report only fields confirmed through tool output.
Treat tokens, credentials and sensitive metadata as redacted content.
List unavailable SDK tools as verification limitations.
Never modify the input APK.

Output

Provide the inspected artifact, tools used/unavailable, confirmed metadata, findings ordered by severity, verification steps and report path when generated.

Frequently asked questions

Inspect Apk