SkillMD Review · apk-reverse
our safety review · skill by zhaoxuya520
Executes PowerShell scripts that invoke jadx, apktool, frida, adb, and apksigner to decompile, modify, rebuild, sign, and install APKs on devices, with automatic tool bootstrap from GitHub and PyPI.
reviewed 2026-08-22
What the verdicts mean
No risky instructions — documentation or standard, read-only development-tool usage.
Legitimate purpose with real capabilities (runs scripts, calls services, or handles credentials). Read the skill before installing.
Risky patterns beyond the skill's job — elevated privileges, config changes, or bypassed confirmations. Review carefully.
Instructions a safe skill should never contain — injection, exfiltration, or destructive commands. Don't install unless you've verified the source.
Could not be confidently assessed — treat as unreviewed and inspect the SKILL.md yourself.