mobile-insecure-storage

SUSPICIOUS. The skill is internally coherent as a mobile security-testing skill, but it grants an AI agent offensive app-assessment capabilities and uses several external tools that can extract sensitive device/app data. Data flows stay local and there is no clear credential harvesting or remote exfiltration, so this is not confirmed malware; however, the exploit-oriented purpose and third-party toolchain make it high security risk.