conducting-mobile-app-penetration-test

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a mobile pentest guide, but it grants an AI agent high-risk offensive security capabilities: interception, auth bypass, pinning bypass, runtime hooking, and sensitive data extraction. Install sources are mostly legitimate tools, yet unpinned third-party tooling/scripts and the offensive scope make this a high-risk skill rather than benign documentation.

Confidence: 93%Severity: 84%
Audit Metadata
Analyzed At
Mar 15, 2026, 09:05 AM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Fconducting-mobile-app-penetration-test%2F@edd21aa5f88fe560a0f65e04280ea7ed0fae3b5e