Updated 7mo ago
by dweinstein
mobile-security-skills
A collection of Claude Code and OpenAI Codex Agent Skills for mobile application security testing
53 GitHub stars (53)
+13 in 30 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | +1 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | +1 |
| Oct 18 | +1 |
| Oct 19 | 0 |
| Oct 20 | +2 |
| Oct 21 | +1 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | +1 |
| Oct 25 | 0 |
| Oct 26 | +2 |
| Oct 27 | +1 |
| Oct 28 | 0 |
| Oct 29 | 0 |
| Oct 30 | 0 |
| Oct 31 | 0 |
| Nov 1 | +2 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | +1 |
| Nov 5 | 0 |
- 12 skills (12 skills found in its SKILL.md files)
- 8 forks (8 forks)
- 7mo ago last update (Last updated 7mo ago)
Install
Skills CLI
npx skills add dweinstein/mobile-security-skills
Asks which skills and agents to install. Just one: npx skills add dweinstein/mobile-security-skills --skill auth-assessment — add -g for every project.
Claude Code
git clone https://github.com/dweinstein/mobile-security-skillscp -r "mobile-security-skills/skills/auth-assessment" ~/.claude/skills/
Copies the auth-assessment skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add dweinstein/mobile-security-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
auth-assessment
Assess mobile app authentication and authorization mechanisms against MASVS-AUTH controls and MASTG tests. Use when reviewing login flows, biometric auth, session management, MFA implementation, or access control in Android or iOS apps.
skills/auth-assessment/ on GitHub (opens in a new tab)SKILL.md -
code-quality-scan
Scan mobile app code quality and security against MASVS-CODE controls and MASTG tests. Use when checking for vulnerable dependencies, input validation issues, injection flaws, outdated platform requirements, or third-party library risks in Android or iOS apps.
skills/code-quality-scan/ on GitHub (opens in a new tab)SKILL.md -
crypto-review
Review mobile app cryptographic implementations against MASVS-CRYPTO controls and MASTG tests. Use when auditing encryption, key management, hashing, random number generation, or cryptographic protocol usage in Android or iOS apps.
skills/crypto-review/ on GitHub (opens in a new tab)SKILL.md -
masvs-checklist
Generate a MASVS v2 compliance checklist with MASTG test mappings for a mobile app. Use when you need a complete security checklist, compliance tracking document, or gap analysis against OWASP MASVS for Android or iOS apps.
skills/masvs-checklist/ on GitHub (opens in a new tab)SKILL.md -
mobile-pentest-plan
Generate a mobile app penetration testing plan based on MASTG methodology and NowSecure practices. Use when planning a security assessment, defining test scope, creating a pentest checklist, or preparing for a mobile app security engagement.
skills/mobile-pentest-plan/ on GitHub (opens in a new tab)SKILL.md -
mobile-threat-model
Create a comprehensive threat model for a mobile application using STRIDE methodology mapped to MASVS controls. Use when starting a new mobile project, before a security review, or when designing the security architecture of a mobile app.
skills/mobile-threat-model/ on GitHub (opens in a new tab)SKILL.md -
network-security-check
Check mobile app network communication security against MASVS-NETWORK controls and MASTG tests. Use when reviewing TLS configuration, certificate pinning, cleartext traffic, or API communication security in Android or iOS apps.
skills/network-security-check/ on GitHub (opens in a new tab)SKILL.md -
platform-interaction-review
Review mobile app platform interaction security against MASVS-PLATFORM controls and MASTG tests. Use when auditing IPC mechanisms, WebViews, deep links, URL schemes, permissions, content providers, or UI security in Android or iOS apps.
skills/platform-interaction-review/ on GitHub (opens in a new tab)SKILL.md -
privacy-audit
Audit mobile app privacy practices against MASVS-PRIVACY controls and MASTG tests. Use when reviewing data minimization, user tracking, consent mechanisms, data collection transparency, or user data control in Android or iOS apps.
skills/privacy-audit/ on GitHub (opens in a new tab)SKILL.md -
resilience-assessment
Assess mobile app resilience against reverse engineering and tampering per MASVS-RESILIENCE controls and MASTG tests. Use when evaluating anti-tampering, root/jailbreak detection, obfuscation, anti-debugging, or integrity verification in Android or iOS apps.
skills/resilience-assessment/ on GitHub (opens in a new tab)SKILL.md -
secure-mobile-dev-guide
Provide secure mobile development guidance based on the NowSecure Secure Mobile Development guide, MASVS, and MASTG. Use when developers ask how to implement a feature securely, need security code review guidance, or want best practices for a specific mobile development pattern.
skills/secure-mobile-dev-guide/ on GitHub (opens in a new tab)SKILL.md -
secure-storage-audit
Audit mobile app source code for insecure data storage vulnerabilities per MASVS-STORAGE controls and MASTG tests. Use when reviewing how an app stores sensitive data locally, checks for data leakage, or assesses data-at-rest protection on Android or iOS.
skills/secure-storage-audit/ on GitHub (opens in a new tab)SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
difyby langgenius Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-h…
-
ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.