Mobile Mastg — Security skill for Claude Code
Mobile app DAST workflow — OWASP MASTG / MASVS mapping.
How to install Mobile Mastg
Installs to ~/.claude/skills/tyrusrc-praetor-mobile-mastg/SKILL.md
mkdir -p ~/.claude/skills/tyrusrc-praetor-mobile-mastg && curl -fsSL https://raw.githubusercontent.com/TyrusRC/praetor/HEAD/.claude/skills/mobile-mastg.md -o ~/.claude/skills/tyrusrc-praetor-mobile-mastg/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Mobile Mastg does
description: Mobile app DAST workflow — OWASP MASTG / MASVS mapping. Frida + adb + Burp proxy. Load when target has an Android/iOS app in scope. globs:
Mobile MASTG Workflow
Use when: target has an Android/iOS app in scope (APK / IPA / store URL), or a web finding points at a mobile-specific surface (deep link, universal link, WebView bridge). Pair with `mobile-dynamic-agent`. NOT a substitute for static analysis — Praetor mobile is **supporter tier**, not focus.
Decision gate
Alternatives in Security
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- Mobile First Audit.Skill — mobile-first-audit.skill.md 265 ★
- Node9 Proxy — The Execution Security Layer for the Agentic Era 209 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Mobile Audit
Mobile-responsiveness audit at 375px. Scope is inferred from your prompt — a page, a module, or the whole app.
Universal Re Skill
Universal reverse engineering, 40+ vuln classes & working PoC generation for Android/iOS/Windows PE/Linux ELF/
Auth Load
Store + validate authenticated test-account credentials for the active web-vuln tier. Paste session material (
Harness Audit
Audit an existing Claude Code harness for configuration integrity (4-scope scan, JSON validity, anti-patterns,
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Mobile Resume
Audit an unfinished mobile app, create a completion plan, then implement remaining work after approval.
Related Agents
Mobile Attacker
Mobile application security specialist for Android and iOS. Handles APK decompilation, static/dynamic analysis
Mobile Dynamic Agent
Drive Frida (iOS+Android) and adb (Android) on operator's host. Bypass SSL pinning + root/JB detection, hook c
Mobile Security Auditor.Agent
Read-only security and EU compliance auditor for Android, iOS, Flutter and connected-device companion apps. Ap