Mobile Security Audit

This skill performs static code analysis for mobile application security vulnerabilities across Android (Java/Kotlin), iOS (Swift/Objective-C), React Native (JavaScript/TypeScript), and Flutter (Dart) projects. It identifies vulnerabilities mapped to all 10 OWASP Mobile Top 10:2024 categories, providing CWE references and concrete UNSAFE/SAFE code pairs for remediation.

When to Use

• When the user asks to "audit mobile security", "review mobile app code", or "check for mobile vulnerabilities"
• When the user mentions "OWASP Mobile Top 10", "mobile pentest", or "mobile app security review"
• When scanning Android projects (Kotlin/Java with AndroidManifest.xml, build.gradle)
• When scanning iOS projects (Swift/Objective-C with Info.plist, .xcodeproj)
• When reviewing React Native or Flutter projects for mobile-specific security issues
• When a pull request modifies authentication, data storage, network communication, or cryptographic code in a mobile app
• When the user asks about "insecure data storage", "certificate pinning", "root/jailbreak detection", or "WebView security"

When NOT to Use