Skip to main content

performing-android-app-static-analysis-with-mobsf

Automates static analysis of Android apps using MobSF to identify security vulnerabilities before deployment.

Install this skill

or
55/100

Security score

The performing-android-app-static-analysis-with-mobsf skill was audited on Jun 12, 2026 and we found 17 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 72

Curl to non-GitHub URL

SourceSKILL.md
72curl -F "file=@target_app.apk" http://localhost:8000/api/v1/upload \
medium line 84

Curl to non-GitHub URL

SourceSKILL.md
84curl -X POST http://localhost:8000/api/v1/scan \
medium line 89

Curl to non-GitHub URL

SourceSKILL.md
89curl -X POST http://localhost:8000/api/v1/report_json \
medium line 125

Curl to non-GitHub URL

SourceSKILL.md
125curl -X POST http://localhost:8000/api/v1/download_pdf \
medium line 130

Curl to non-GitHub URL

SourceSKILL.md
130curl -X POST http://localhost:8000/api/v1/report_json \
medium line 146

Curl to non-GitHub URL

SourceSKILL.md
146curl -s -X POST http://mobsf:8000/api/v1/scan \
medium line 149

Curl to non-GitHub URL

SourceSKILL.md
149SCORE=$(curl -s -X POST http://mobsf:8000/api/v1/scorecard \
low line 53

External URL reference

SourceSKILL.md
53- Network access to MobSF web interface (default: http://localhost:8000)
low line 65

External URL reference

SourceSKILL.md
65Retrieve the REST API key from the MobSF web interface at `http://localhost:8000/api_docs` or from the startup console output. The API key enables programmatic scanning.
low line 72

External URL reference

SourceSKILL.md
72curl -F "file=@target_app.apk" http://localhost:8000/api/v1/upload \
low line 84

External URL reference

SourceSKILL.md
84curl -X POST http://localhost:8000/api/v1/scan \
low line 89

External URL reference

SourceSKILL.md
89curl -X POST http://localhost:8000/api/v1/report_json \
low line 125

External URL reference

SourceSKILL.md
125curl -X POST http://localhost:8000/api/v1/download_pdf \
low line 130

External URL reference

SourceSKILL.md
130curl -X POST http://localhost:8000/api/v1/report_json \
low line 144

External URL reference

SourceSKILL.md
144http://mobsf:8000/api/v1/upload -H "Authorization: $MOBSF_API_KEY")
low line 146

External URL reference

SourceSKILL.md
146curl -s -X POST http://mobsf:8000/api/v1/scan \
low line 149

External URL reference

SourceSKILL.md
149SCORE=$(curl -s -X POST http://mobsf:8000/api/v1/scorecard \
Scanned on Jun 12, 2026
View Security Dashboard
Installation guide →