ios-redteam-pipeline

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs extracting hardcoded API keys/JWTs and keychain items (via greps and dumps) and states those extracted secrets are fed directly into downstream tests, which would require the LLM or agent to handle and potentially output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill contains explicit, actionable instructions to locate and extract credentials (hardcoded keys, JWTs, Keychain items), bypass certificate pinning with Frida/objection, and perform MITM/network interception—behaviors that directly enable credential theft and data exfiltration.