Supply chain
mediumContextual risklow confidenceThe skill instructs the agent to launch the official MobSF Docker image pinned only to the mutable :latest tag, so the container code executed during the documented scan workflow can silently change upstream between runs.
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest
vector:instruction
Counter-argument considered
The quote is exact and sits in the documented workflow as a concrete launch instruction, so reach and chain hold; the image is official but tagged only with the mutable :latest, so the pinned official-registry carve-out does not apply and the mutable-tag supply-chain exposure stands. The behavior is openly printed rather than concealed, so the undeclared gate fails, but open documentation does not neutralize the supply-chain risk.