conducting-mobile-app-penetration-test
Warn
Audited by Socket on Mar 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally consistent as a mobile pentest guide, but it grants an AI agent high-risk offensive security capabilities: interception, auth bypass, pinning bypass, runtime hooking, and sensitive data extraction. Install sources are mostly legitimate tools, yet unpinned third-party tooling/scripts and the offensive scope make this a high-risk skill rather than benign documentation.
Confidence: 93%Severity: 84%
Audit Metadata