intercepting-mobile-traffic-with-burpsuite

SUSPICIOUS/HIGH-RISK but not confirmed malware. The skill is internally consistent as a mobile security testing guide and mainly references legitimate tooling, but it gives an AI agent offensive security capabilities: MITM interception, SSL pinning bypass, credential/token capture, and active vulnerability testing against target APIs. There is no clear credential harvesting to a third-party endpoint, yet the operational risk is high because the skill’s intended use is penetration testing and exploitation-oriented analysis.