Why does my antivirus warn me about CheatDroid?
Some antivirus apps flag CheatDroid, and that’s expected. It’s built to change other apps’ data, it needs root to do that, and a scanner treats any app with that much reach as a risk. The warning is about what CheatDroid can do, not about something hidden in it.
Why root tools get flagged
Root gives an app almost unlimited rights and takes it past the normal Android permission system. Malware wants exactly that, so scanners flag the category. CheatDroid uses it to read and edit app data, which can break an app if you’re careless. In that sense the warning is fair.
Where the real risk is
A tampered copy. Mirror sites hand out modified versions of popular root apps, “Pro unlocked” ones in particular, and a tampered app with root can do anything on your phone. Get CheatDroid from the download page here and nowhere else. Every release is signed with the same key, which is also why Android lets a new version install over the old one; a modified copy can’t carry that signature.