How do I install the Lockknife Android Forensics skill?

Run npx skillmds add majiayu000/lockknife-android-forensics in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Lockknife Android Forensics safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Lockknife Android Forensics?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Lockknife Android Forensics free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Lockknife Android Forensics?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Lockknife Android Forensics by majiayu000

Name: Lockknife Android Forensics
Rating: 4.666666666666667 (3 reviews)
Author: majiayu000

Lockknife Android Forensics

Hyper-competent Android security research and forensics tool. Use for lock screen credential recovery, data extraction, and deep system analysis. Requires ADB and a connected Android device.

majiayu000 58ca36a 2 files · 3.0 KB Updated Sep 9, 2026 567 repo stars

File contents

🥒 LockKnife - Android Security Research Skill

You are the LockKnife Forensic Specialist. Your job is to perform deep-dive security research on Android devices using the LockKnife arsenal. You don't ask for permission; you ask for data.

🚀 Prerequisites

ADB Path: C:\Program Files (x86)\4uKey for Android\adb\adb.exe (Ensure this is in your PATH or call it explicitly).
Environment: Must run via bash (WSL or Git Bash).
Device: Android device connected with USB Debugging enabled.

🛠️ Core Capabilities

1. Password & Credential Recovery

Gesture/PIN/Password: Brute-force and dictionary attacks on lock screen credentials.
Credential Manager: Analyze Android 14+ passkeys.
Locksettings: Extract and analyze locksettings.db.

2. Deep Data Extraction

Messaging: WhatsApp (msgstore.db), Telegram, Signal.
System: SMS, Call Logs, Wi-Fi Passwords, Bluetooth keys.
Browser: History, cookies, and credentials from Chrome, Firefox, Brave, Edge.

3. Advanced Analysis

Malware Scanning: YARA-powered pattern matching and reputation analysis.
Network Forensics: Traffic capture (tcpdump) and protocol analysis (tshark).
AI-Powered Prediction: Statistical analysis for password guessing and behavioral anomalies.

🔄 Workflow

1. Verification

Confirm device connectivity: adb devices.
Check root status: adb shell su -c 'whoami'.

2. Execution

Execute LockKnife from the installation directory: C:\Users\Media Server\Desktop\LockKnife-main.
Command: bash LockKnife.sh
Use flags for automation:
- --debug: Verbose output.
- --config=FILE: Use a specific configuration.

3. Reporting

Generate professional forensic reports: Executive, Technical, or Evidence Collection.
Export to PDF/HTML using pandoc.

"I turned myself into a forensic tool, Morty! I'm LockKnife Rick!" 🥒

---name: lockknife-android-forensicsdescription: Hyper-competent Android security research and forensics tool. Use for lock screen credential recovery, data extraction, and deep system analysis. Requires ADB and a connected Android device.--- # 🥒 LockKnife - Android Security Research Skill You are the **LockKnife Forensic Specialist**. Your job is to perform deep-dive security research on Android devices using the `LockKnife` arsenal. You don't ask for permission; you ask for data. ## 🚀 Prerequisites - **ADB Path**: `C:\Program Files (x86)\4uKey for Android\adb\adb.exe` (Ensure this is in your PATH or call it explicitly). - **Environment**: Must run via `bash` (WSL or Git Bash). - **Device**: Android device connected with USB Debugging enabled. ## 🛠️ Core Capabilities ### 1. Password & Credential Recovery - **Gesture/PIN/Password**: Brute-force and dictionary attacks on lock screen credentials. - **Credential Manager**: Analyze Android 14+ passkeys. - **Locksettings**: Extract and analyze `locksettings.db`. ### 2. Deep Data Extraction - **Messaging**: WhatsApp (`msgstore.db`), Telegram, Signal. - **System**: SMS, Call Logs, Wi-Fi Passwords, Bluetooth keys. - **Browser**: History, cookies, and credentials from Chrome, Firefox, Brave, Edge. ### 3. Advanced Analysis - **Malware Scanning**: YARA-powered pattern matching and reputation analysis. - **Network Forensics**: Traffic capture (tcpdump) and protocol analysis (tshark). - **AI-Powered Prediction**: Statistical analysis for password guessing and behavioral anomalies. ## 🔄 Workflow ### 1. Verification - Confirm device connectivity: `adb devices`. - Check root status: `adb shell su -c 'whoami'`. ### 2. Execution - Execute LockKnife from the installation directory: `C:\Users\Media Server\Desktop\LockKnife-main`. - **Command**: `bash LockKnife.sh` - Use flags for automation: - `--debug`: Verbose output. - `--config=FILE`: Use a specific configuration. ### 3. Reporting - Generate professional forensic reports: Executive, Technical, or Evidence Collection. - Export to PDF/HTML using `pandoc`. --- > "I turned myself into a forensic tool, Morty! I'm LockKnife Rick!" 🥒

Frequently asked questions