{"slug":"performing-thick-client-application-penetration-test","source_name":"performing-thick-client-application-penetration-test","name":"Performing Thick Client Application Penetration Test","description":"Conduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure API communication in desktop applications using dnSpy, Procmon, and Burp Suite.","version":1,"lift":{"pass_rate_delta_pts":4.35,"pass_rate_pct":8.7,"total_cases":23,"passed_cases":2,"tokens_delta_pct":51.2,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T11:36:54.266714+00:00"},"skill_score":0.087,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":4.35,"with_pass_pct":8.7,"without_pass_pct":4.3,"tokens_delta_pct":51.2,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T11:36:54.266714+00:00","run_id":"5f51ce48-dc7a-4c1f-ad55-bf4fea926912","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"17f6484742c1dd825ab5c0ddec98e694d67cfdc9e0105e3434ec514f20d04cd7","raw_url":"https://app.decimal.ai/s/performing-thick-client-application-penetration-test/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/performing-thick-client-application-penetration-test"}