We found 24 Android vulnerabilities using our open source AI security agent

Researchers at GitHub Security Lab created an open-source AI security agent that discovered 24 vulnerabilities in Android applications by using custom taskflows to guide large language models through incremental analysis steps. The taskflows, which require a GitHub Copilot license, help security teams automate vulnerability detection by identifying entry points and classifying Android-specific vulnerability classes that LLMs might otherwise miss. The tools are publicly available and can be run on any project, though analysis may take several hours and consume significant token usage.