binary-mobile-reversing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs finding and extracting hard-coded keys, tokens, and temporary credentials from binaries (e.g., grep for key/secret/token, OSS STS, .so rodata keys), which would require the LLM/agent to handle and likely emit secret values verbatim, creating an exfiltration risk.