mobile-reverse

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly includes and instructs running hook scripts and tools that log/dump cryptographic keys, keychain entries, and hardcoded API keys—actions that require capturing and outputting secret values verbatim, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content contains explicit, actionable instructions and code to bypass app/device protections, inject/modify binaries, dump/exfiltrate keys, keychain and files, and hide tracing tools—patterns that enable credential theft, remote tampering and supply‑chain style backdoors.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs modifying binaries and device state (injecting frida-gadget, re-signing & installing APK/IPA, installing system certificates via Magisk, running frida/objection commands that dump keychains or disable root/jailbreak/SSL checks), which are actions that change the machine/device state and can require elevated privileges or compromise the host/device.