mobile-security-mobsf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's example curl commands include "Authorization: " headers and "" placeholders, which instruct embedding secret API keys and hashes verbatim into requests, requiring the LLM/user to handle secrets directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes a Docker image at runtime (docker run ... opensecurity/mobile-security-framework-mobsf:latest), which will pull and execute remote code and is a required dependency for the skill.