GitHub AI Agent Finds 24 Android Flaws

GitHub Security Lab built an open source AI taskflow agent that found and reported 24 vulnerabilities in Android apps, including OsmAnd and Wikipedia. OsmAnd's exported MapActivity let any app silently import settings and leak location data; Wikipedia's deeplink parser allowed cookie theft and account takeover. The taskflows require a GitHub Copilot license and are available in the seclab-taskflows repository.