conducting-mobile-app-penetration-test

SUSPICIOUS: the skill is internally consistent for mobile pentesting and does not show hidden credential harvesting or off-purpose exfiltration, but it gives an AI agent explicit offensive security capabilities to bypass protections and manipulate apps at runtime. The main risk is the agent-enabled penetration-testing scope itself, not prompt injection or stealthy malware behavior.