mobile-security

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content contains explicit, actionable instructions for bypassing TLS pinning and root/jailbreak checks, modifying APKs to enable instrumentation, extracting cryptographic keys and credentials from app envelopes and native libraries, and forging IDOR-style banking requests to read internal account data—clear, high-risk data-exfiltration and exploitation patterns that can be used as backdoors or to steal sensitive information.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow (see reference/flutter-aot-reversing.md — the "blutter recipe" and "blutter dumps package:/*.dart" sections) explicitly requires fetching third‑party tooling from GitHub and decompiling/reading arbitrary target APK/Dart code (untrusted, user-generated app content) which the agent is expected to interpret to decide follow-up actions (endpoints, crypto params, exploit paths), creating a clear avenue for indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's blutter recipe explicitly instructs cloning and running code from https://github.com/worawit/blutter (git clone ...; python3 blutter.py), which fetches remote code that would be executed and is presented as a required tool for Flutter AOT decompilation.