📦

mobile-engineer

Name: mobile-engineer
Author: zl2023github

Ревизия содержимого r2 Средний риск 🌐 Доступ к сети⚙️ Внешние команды

Build and Improve Mobile Applications

Mobile teams must coordinate platform architecture, tooling, testing, performance, and release requirements. This skill provides practical guidance and examples for native and cross-platform workflows.

Поддерживает: Claude Codex Code(CC)

📊 65 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "mobile-engineer" from https://skillstore.io/skills/zl2023github-mobile-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-mobile-engineer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/zl2023github-mobile-engineer.md Подписанный manifest GET /api/skills/zl2023github-mobile-engineer/manifest Подписанный lockfile GET /api/skills/zl2023github-mobile-engineer/lockfile

Протестировать

Использование «mobile-engineer». Plan architecture for a 20-screen Flutter commerce application with offline browsing.

Ожидаемый результат:

Use MVVM with repository boundaries and Riverpod state management.
Use Drift for offline data, Dio for networking, and GoRouter for navigation.
Validate startup time, list rendering, cache behavior, and retry handling.

Использование «mobile-engineer». Diagnose a React Native Android build that fails after dependency updates.

Ожидаемый результат:

Compare the Node, Java, Gradle, Android plugin, and React Native compatibility ranges.
Reproduce from a clean cache, then restore dependencies incrementally.
Record the failing task and first actionable stack trace before changing configuration.

Аудит безопасности

Средний риск

v4 • 23.07.2026 Открыть версионный отчет

All 55 static alerts are false positives caused by Markdown syntax, mobile tool names, explicit HTTPS examples, and a fixed Xcode cache path. No prompt injection, credential exposure, obfuscated payload, host reconnaissance, or unbounded root deletion appears in the reviewed files. Semantic review identified unpinned package execution and unconditional response-body logging as medium risks.

Просканировано файлов

326

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Средний

SKILL.md:43-46 references/tools-quickref.md:35-37

Unpinned Package Execution

Setup examples invoke react-native@latest, unversioned create-expo-app, and unpinned npm dependencies. A compromised future release could execute during project initialization or installation.

The commands directly resolve and execute packages without immutable versions or integrity controls. This is a recognized software supply-chain exposure.

Средний

SKILL.md:118-119

Unconditional API Response Logging

The API example enables response-body logging without a release guard. Responses may contain tokens or personal data that can reach device or CI logs.

The interceptor is added unconditionally with responseBody enabled. The example shows no environment check, redaction, or production disablement.

Факторы риска

Аудитор:: codex Посмотреть историю аудитов →

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/zl2023github-mobile-engineer/security.svg)](https://skillstore.io/skills/zl2023github-mobile-engineer?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/zl2023github-mobile-engineer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zl2023github-mobile-engineer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/zl2023github-mobile-engineer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

zl2023github. (2026). mobile-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4

Цитата BibTeX

@techreport{zl2023github-zl2023github-mobile-engineer-2026,
  author = {zl2023github},
  title = {mobile-engineer security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mobile-engineer security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "zl2023github"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4"
identifiers:
  - type: other
    value: "skillstore:zl2023github-mobile-engineer:audit:4"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Start a Mobile Project

Select a stack, initialize the project, and establish architecture, navigation, storage, and networking foundations.

Modernize an Existing Application

Review architecture, performance, security, and dependency choices before planning focused improvements.

Prepare a Store Release

Build a release checklist covering tests, signing, privacy declarations, monitoring, metadata, and deployment automation.

Попробуйте эти промпты

Create a Starter Project

Create a [Flutter or React Native] project for [application type] with navigation, theming, and a clear folder structure.

Implement a Mobile Feature

Implement [feature] for [platform], using the existing architecture and including loading, empty, error, accessibility, and test states.

Diagnose a Performance Problem

Analyze [performance symptom] in this [platform] project, identify measurable causes, and propose benchmarks before and after each change.

Design a Cross-Platform Release Plan

Design a secure release workflow for [iOS and Android], covering tests, signing, secrets, artifacts, staged rollout, monitoring, and rollback.

Лучшие практики

State the platform, framework version, existing architecture, and deployment target before requesting changes.
Measure performance before optimization and define a repeatable benchmark for every proposed improvement.
Review commands, dependency sources, signing changes, and release actions before execution.

Избегать

Do not request a complete application without product requirements, platform constraints, or acceptance criteria.
Do not copy sample endpoints, credentials, package versions, or signing settings directly into production.
Do not run cleanup, installation, build, or publishing commands without reviewing their scope and side effects.

Часто задаваемые вопросы

Which mobile platforms does this skill cover?

It covers native iOS, native Android, Flutter, React Native, and related mobile delivery workflows.

Can it choose a framework for a new application?

Yes. Provide team skills, feature requirements, performance needs, native integrations, schedule, and maintenance constraints.

Can it generate production-ready code?

It can produce implementation guidance and code patterns, but teams must review, test, secure, and adapt every result.

Does it publish applications automatically?

No. Store publishing requires credentials, signing assets, account access, policy checks, and explicit human approval.

How should package mirrors be handled?

Verify ownership, transport security, package integrity, and organizational policy before changing any registry or repository.

How can sensitive data stay out of logs?

Disable body logging in production, redact secrets and personal data, and test logging behavior in release builds.

Сведения для разработчиков

Автор

zl2023github

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/zl2023github/software-engineer-skills/tree/main/software-engineering/mobile-engineer

Ссылка

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Актуальность поддержки

26.07.2026

Использование

3 загрузок · 1 просмотров

Структура файлов

📁 references/

📄 tools-quickref.md

📄 SKILL.md