CtrlK
BlogDocsLog inGet started
Tessl Logo

competition-android-hooking

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Android APK hooking, Frida tracing, request-signing recovery, SSL pinning bypass, JNI boundary inspection, and app trust-boundary analysis. Use when the user asks to hook an APK, inspect signer logic, trace Java or native boundaries, bypass pinning or root checks, inspect shared prefs or app databases, or replay accepted mobile requests. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

71

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

80%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, well-structured instruction skill that assumes competence and splits detail cleanly into a single real reference file. Its main weakness is the absence of an explicit validation feedback loop around the destructive patch/resign step, which caps workflow clarity.

Suggestions

Add an explicit validate->fix->retry checkpoint after patching/resigning (e.g., 'verify the resigned APK installs and the hook fires; if not, re-patch and retry') to lift workflow clarity above 3.

Include one or two concrete Frida command snippets or hook template examples in the reference file to push actionability from concrete guidance to copy-paste-ready.

Surface a brief verification step in Quick Start (step 5 already implies replay proof) as an explicit 'confirm the trust edge' gate.

DimensionReasoningScore

Conciseness

The body is lean and directive throughout, never explaining what Frida, SSL pinning, or JNI are; every line earns its place and assumes Claude's competence.

5 / 5

Actionability

Concrete, specific guidance names exact hook targets ('request signers, crypto helpers, keystore access, protobuf encode or decode, JNI marshaling') and evidence to capture, but provides no copy-paste-ready Frida commands or code, leaving minor gaps for an instruction-only skill.

4 / 5

Workflow Clarity

A clear Quick Start plus a three-phase sequenced workflow with implicit checkpoints ('Correlate static evidence and dynamic traces before claiming a trust edge is understood', 'Reproduce the signed request') exists, but patching/resigning is a destructive operation with no explicit validate->fix->retry feedback loop, capping the score per the rubric.

3 / 5

Progressive Disclosure

Well-organized overview sections with a clearly signaled one-level-deep reference ('Load `references/android-hooking.md` for hook targets, storage checklist, and evidence packaging') that points to a real, well-scoped bundle file.

5 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A highly specific, well-triggered description that clearly answers both what and when and is tightly scoped to a downstream CTF specialization. The only minor gap is a few missing synonyms/file extensions in the trigger terms.

DimensionReasoningScore

Specificity

Lists six concrete actions ('Android APK hooking, Frida tracing, request-signing recovery, SSL pinning bypass, JNI boundary inspection, and app trust-boundary analysis'), exceeding the comprehensive-coverage anchor.

5 / 5

Completeness

Explicitly states both what ('CTF-sandbox workflow for Android APK hooking...') and when ('Use when the user asks to...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

The 'Use when' clause covers natural phrases ('hook an APK', 'bypass pinning or root checks', 'inspect shared prefs or app databases'), but omits some synonyms and the .apk extension, so it sits just below the comprehensive anchor.

4 / 5

Distinctiveness Conflict Risk

Narrow Android-hooking CTF niche with a hard routing guard ('Use only after `$ctf-sandbox-orchestrator`') yields minimal conflict risk.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.