analyzing-ios-app-security-with-objection

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to dump keychain items, database rows, memory (searching for "password", "api_key", "Bearer"), and hook methods with --dump-args, which will produce sensitive secrets that the LLM would need to handle or output verbatim, creating an exfiltration risk.