The request names 'dragonjar' (an Android pentesting skill), but none of the provided products is DragonJAR or a pentesting skill named as such. The closest matches for Android security testing are Apktool for reverse engineering Android APKs 8 and Android's own Intent security audit guidance 1; the rest of the candidates do not clearly do Android pentesting.
A question back: Did you mean a specific DragonJAR skill or repository? If you can share its URL or purpose, I can check whether it is a match.
- 1
- 2
Androidandroid.comverified and signed
Its indexed skill android-intent-security gives best practices for auditing component configurations in AndroidManifest.xml, relevant to Android security review 1.
official:CLI · libultrahdr
for agents: android-intent-security · testing-setup · restore-credentials
Sources
- 1Android | Do More With Google on Android Phones & Devicesandroid.com · read 2026-10-29
- 8Apktoolapktool.org · read 2026-10-29
For agents: the 10 actions behind this answer
android-intent-security · android-intent-security verified and signed
Best practices for Android Intent security. Use this skill when auditing component configurations in AndroidManifest.xml activities, services, receivers) or source code handling incoming Intents (getIntent, getParcelableExtra) to prevent Intent Redirection and unauthorized access.
security-review · security-review verified and signed
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss. Use this skill when asked to scan code for security vulnerabilities, find bugs, check for
android · SkiaSharp - Native Assets for Win32 verified and signed
docker/scout-action · Docker Scout verified and signed
List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout
sentry-android-sdk · sentry-android-sdk verified and signed
Full Sentry SDK setup for Android. Use when asked to "add Sentry to Android", "install sentry-android", "setup Sentry in Android", or configure error monitoring, tracing, profiling, session replay, or logging for Android applications. Supports Kotlin and Java codebases.
· Playwright website read, tools not yet checked
Web automation and testing for apps, scripts, and AI agents
agent-experience · agent-experience verified and signed
Audit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task prompt and real tools (WebFetch, Bash, Write). Agents must discover the docs themselves, install deps, ask for credentials if needed, and attempt real execution.
· Apktool website read, tools not yet checked
A tool for reverse engineering Android apk files.
appwrite-kotlin · appwrite-kotlin verified and signed
Appwrite Kotlin SDK skill. Use when building native Android apps or server-side Kotlin/JVM backends with Appwrite. Covers client-side auth (email, OAuth with Activity integration), database queries, file uploads, real-time subscriptions with coroutine support, and server-side admin via API keys for
rc-testing · rc-testing verified and signed
Use this skill when testing a RevenueCat Android integration. Covers the RevenueCat Test Store (test_ API key prefix, in dialog Success/Fail/Cancel choice), mockk based unit testing with an interface wrapper around Purchases, and a GitHub Actions CI pattern. Avoids Google Play sandbox for day to day
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.