mobile-forensics

SUSPICIOUS: the skill's forensic capabilities broadly match its stated purpose and there is no explicit exfiltration or malicious command execution, but the trust story is incomplete. The main implementation dependency is unspecified/unverifiable, and the skill handles highly sensitive credentials and cloud tokens without identifying install provenance or external API endpoints.