auditing-mobile-biometric-and-local-auth-bypass SKILL.md skillA
auditing-mobile-biometric-and-local-auth-bypass from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/auditing-mobile-biometric-and-local-auth-bypass@git:20260908.e3ae18aPins git:20260908.e3ae18a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/auditing-mobile-biometric-and-local-auth-bypass/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260908.e3ae18a, committed Sep 8, 2026
- Size
- 10,045 bytes
- Repository stars
- 26
- License
- MIT
Audit local authentication on a mobile app, where a biometric or device-passcode gate protects sensitive access but can be bypassed because the app trusts the result of the prompt rather than a key released by it, gates only the user interface while the protected data or action remains reachable, does not invalidate the key when enrolled biometrics change, or accepts a callback an attacker can forge on a controlled device. Use when a mobile app gates sensitive data or actions behind a…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Auditing mobile biometric and local auth bypass: when the prompt says yes but proves nothing A mobile app often guards a sensitive action or a stored secret behind a local authentication prompt: a fingerprint, a face, or the device passcode. That gate is meaningful only when passing it actually releases something the protected path needs, a key that decrypts the data, held so the data cannot be reached without a genuine authentication. It is theater when the app merely asks for the prompt and then trusts its own record of the answer: a success flag the app sets, a callback it believes, or a screen it hides. On a device the attacker controls, a boolean result can be forced, a callback can be forged, and a hidden screen's data is still in memory or on disk. The gate also fails when the released key is not invalidated after the enrolled biometrics change, so a newly added fingerprint unlocks the old secret, or when only the interface is gated while the protected data or action remains directly reachable. The bug is reaching the protected data or action without a genuine local authentication. You audit these by finding what the prompt actually releases …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/auditing-mobile-biometric-and-local-auth-bypass@sha256:bd5197fba1c98200The line at the top of this page pins the label git:20260908.e3ae18a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_effxkpeh75g5deip)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 8, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10045 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_effxkpeh75g5deip GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/auditing-mobile-biometric-and-local-auth-bypass GET https://markdownregistry.com/api/v1/blob/bd5197fba1c98200e77d7d77a6239e64c2c7810cb42e2e21da749b3fa52c4710
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.