Firebase Apk Scanner
Scans Android APK files against Firebase security vulnerabilities using automated analysis and reporting.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add lv416e-firebase-apk-scanner npx -- -y @trustedskills/lv416e-firebase-apk-scanner
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"lv416e-firebase-apk-scanner": {
"command": "npx",
"args": [
"-y",
"@trustedskills/lv416e-firebase-apk-scanner"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The firebase-apk-scanner skill analyzes Android application package (APK) files to identify potential security vulnerabilities and misconfigurations. It provides detailed reports on detected issues, including manifest analysis, permissions review, and potential risks associated with the APK's contents. This allows for proactive identification of weaknesses before deployment or distribution.
When to use it
- Security Audits: Integrate into a CI/CD pipeline to automatically scan newly built APK files for vulnerabilities.
- App Store Submissions: Verify an application meets security standards prior to submitting it to app stores.
- Malware Analysis: Quickly assess the potential risks associated with downloaded or suspicious APKs.
- Vulnerability Research: Identify common misconfigurations and weaknesses in Android applications.
Key capabilities
- APK manifest analysis
- Permissions review
- Identification of potential security vulnerabilities
- Generation of detailed reports
Example prompts
- "Scan this APK file: [file path]"
- "Analyze the attached APK for permissions issues."
- "Generate a report on the security risks in this application package."
Tips & gotchas
The skill requires access to the APK file being analyzed. Results should be interpreted by experienced security professionals, as false positives can occur and require manual verification.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.