sammyboi81

Mobile Security — Security skill for Claude Code

Security community

iOS/Android app hardening - storage, transport, auth, binary protection (OWASP MASVS).

How to install Mobile Security

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-mobile-security/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-mobile-security && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/mobile-security.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-mobile-security/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Mobile Security does

name: mobile-security description: iOS/Android app hardening - storage, transport, auth, binary protection (OWASP MASVS). tags: mobile

Use OWASP MASVS/MASTG as the checklist. The device and app binary are attacker-controlled: never trust client logic, never embed secrets (API keys, signing keys); anything shipped can be extracted.
Storage: Keychain (iOS) / Keystore + EncryptedSharedPreferences (Android) for tokens; no sensitive data in logs, backups, screenshots (FLAG_SECURE), clipbo

Alternatives in Security

MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★
Reactnative Expo AI Agent System Workflow — AI-powered development toolkit with 7 production agents for React Native/Expo mobile apps 125 ★
Mobile Review — Senior-level deep review of an existing mobile app 107 ★