competition-android-hooking

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly directs recording and replaying plaintext inputs, signed strings, headers, nonces, and token storage so the agent must capture and output secret values verbatim (e.g., headers/signatures) to rebuild accepted requests.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). This skill explicitly instructs bypassing protections (pinning/root checks), hooking signer/keystore/JNI boundaries to capture plaintext, tokens, and request material, and replaying accepted requests—behaviors that enable credential theft and unauthorized data exfiltration.