# Build Secure Mobile Applications

Mobile applications face platform-specific risks across storage, WebViews, authentication, and networking. This skill provides implementation guidance and verification steps for secure mobile code.

## Install

```bash
npx skillstore add sickn33/mobile-security-coder
```

## Metadata

- Status: approved
- Slug: sickn33-mobile-security-coder
- Skillstore revision: r2
- Version status: missing
- Tree hash: c79b64ae901e8c567ddeb109832594c9224701c78886134ca9c668987949cba3
- Author: sickn33
- GitHub username: sickn33
- License: MIT
- Repository: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/mobile-security-coder
- Ref: 81e05e636292629114b76cbb3922fbe57672fc02
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands
- Quality score: 78
- Quality tier: bronze
- Public page: https://skillstore.pages.dev/skills/sickn33-mobile-security-coder
- Manifest: https://skillstore.pages.dev/api/skills/sickn33-mobile-security-coder/manifest

## Capabilities

- Recommends secure input validation and output encoding for mobile interfaces.
- Guides WebView hardening with URL allowlists, HTTPS enforcement, CSP, and restricted file access.
- Explains secure credential storage using iOS Keychain and Android Keystore.
- Designs biometric, OAuth PKCE, token, and session management patterns.
- Covers certificate validation, pinning, deep links, permissions, and privacy controls.
- Provides platform-specific guidance for native, React Native, Flutter, Xamarin, and Cordova applications.

## Use Cases

- Harden a Mobile Feature: Review a new authentication, storage, networking, or WebView feature and produce secure implementation guidance.
- Fix a Security Finding: Translate a mobile vulnerability report into platform-specific code changes and validation steps.
- Define Secure Patterns: Create reusable security requirements for native and cross-platform mobile development teams.

## Prompt Templates

### Review One Mobile Feature

```
Review this [iOS or Android] feature for security risks: [feature description]. List concerns, recommended controls, and verification steps.
```

### Design Secure Local Storage

```
Design secure storage for [data type] in [platform]. Address encryption, key management, backups, logs, memory, and deletion.
```

### Harden a WebView

```
Assess this [framework] WebView design: [details]. Recommend URL validation, JavaScript controls, CSP, bridge protection, cookies, and test cases.
```

### Build a Mobile Security Plan

```
Create a security implementation plan for [application]. Use [threat model], [platforms], and [constraints]. Prioritize controls and define acceptance tests.
```

## Limitations

- Does not replace penetration testing, architecture review, or compliance assessment.
- Requires project details before recommendations can account for platform versions and threat models.
- Does not execute tests or verify deployed mobile applications by itself.
- May require adaptation for framework updates, vendor SDKs, and organization policies.

## Best Practices

- Provide the target platform, framework, data sensitivity, threat model, and supported operating system versions.
- Request concrete validation steps alongside every recommended control.
- Verify generated guidance with platform documentation, automated tests, and security review.

## Anti Patterns

- Do not request generic hardening without sharing architecture and trust boundaries.
- Do not treat client-side controls as substitutes for server-side authorization.
- Do not deploy certificate pinning, biometric gates, or device checks without recovery and update plans.

## Security Audit

- Audited at: 2026-08-04T14:43:40.541\+00:00
- Summary: All seven static alerts are false positives caused by Markdown formatting or defensive mobile-security terminology. No executable commands, malicious behavior, or prompt injection were found.

## Stats

- Views: 97
- Downloads: 12
- Favorites: 0
- Popularity score: 0