flutter-api-reverse-engineering

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs extracting JWTs, session tokens, and crypto keys (e.g., captured_jwt, captured_token, captured_sk, memory-extracted private keys) and then embedding those secrets verbatim into replay requests and standalone client code, which forces the LLM to handle/output sensitive secret values (high exfiltration risk).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This is a high-risk, explicitly abusive guide: it provides step-by-step techniques to bypass TLS/certificate pinning, hook BoringSSL to capture plaintext HTTP, extract JWTs, session tokens, and private keys from memory (via Frida hooks and MemoryAccessMonitor), and replay/store those credentials to build standalone clients—facilitating clear data exfiltration and credential theft.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs installing and running frida-server on a device, pushing files, using rooted devices, accessing protected app data, and hooking/bypassing TLS and crypto protections to extract keys and tokens—actions that bypass security mechanisms and modify the target machine/device state.