exploiting-insecure-data-storage-in-mobile

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs extracting and printing plaintext credentials/tokens (e.g., cat shared_prefs/*.xml, sqlite queries, memory dumps) and even includes example API keys/tokens, which requires the agent to handle or output secret values verbatim.