Skills mobile-engineer
📦

mobile-engineer

Content revision r2 Medium Risk 🌐 Network access⚙️ External commands

Build and Improve Mobile Applications

Mobile teams must coordinate platform architecture, tooling, testing, performance, and release requirements. This skill provides practical guidance and examples for native and cross-platform workflows.

Supports: Claude Codex Code(CC)
📊 65 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "mobile-engineer" from https://skillstore.io/skills/zl2023github-mobile-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-mobile-engineer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "mobile-engineer". Plan architecture for a 20-screen Flutter commerce application with offline browsing.

Expected outcome:

  • Use MVVM with repository boundaries and Riverpod state management.
  • Use Drift for offline data, Dio for networking, and GoRouter for navigation.
  • Validate startup time, list rendering, cache behavior, and retry handling.

Using "mobile-engineer". Diagnose a React Native Android build that fails after dependency updates.

Expected outcome:

  • Compare the Node, Java, Gradle, Android plugin, and React Native compatibility ranges.
  • Reproduce from a clean cache, then restore dependencies incrementally.
  • Record the failing task and first actionable stack trace before changing configuration.

Security Audit

Medium Risk
v4 • 7/23/2026 Open versioned report

All 55 static alerts are false positives caused by Markdown syntax, mobile tool names, explicit HTTPS examples, and a fixed Xcode cache path. No prompt injection, credential exposure, obfuscated payload, host reconnaissance, or unbounded root deletion appears in the reviewed files. Semantic review identified unpinned package execution and unconditional response-body logging as medium risks.

2
Files scanned
326
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
Unpinned Package Execution
Setup examples invoke react-native@latest, unversioned create-expo-app, and unpinned npm dependencies. A compromised future release could execute during project initialization or installation.
The commands directly resolve and execute packages without immutable versions or integrity controls. This is a recognized software supply-chain exposure.
Medium
Unconditional API Response Logging
The API example enables response-body logging without a release guard. Responses may contain tokens or personal data that can reach device or CI logs.
The interceptor is added unconditionally with responseBody enabled. The example shows no environment check, redaction, or production disablement.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zl2023github-mobile-engineer/security.svg)](https://skillstore.io/skills/zl2023github-mobile-engineer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zl2023github-mobile-engineer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zl2023github-mobile-engineer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zl2023github-mobile-engineer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

zl2023github. (2026). mobile-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4

BibTeX citation

@techreport{zl2023github-zl2023github-mobile-engineer-2026, author = {zl2023github}, title = {mobile-engineer security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "mobile-engineer security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "zl2023github" date-released: "2026-07-23" url: "https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4" identifiers: - type: other value: "skillstore:zl2023github-mobile-engineer:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
41
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Start a Mobile Project

Select a stack, initialize the project, and establish architecture, navigation, storage, and networking foundations.

Modernize an Existing Application

Review architecture, performance, security, and dependency choices before planning focused improvements.

Prepare a Store Release

Build a release checklist covering tests, signing, privacy declarations, monitoring, metadata, and deployment automation.

Try These Prompts

Create a Starter Project
Create a [Flutter or React Native] project for [application type] with navigation, theming, and a clear folder structure.
Implement a Mobile Feature
Implement [feature] for [platform], using the existing architecture and including loading, empty, error, accessibility, and test states.
Diagnose a Performance Problem
Analyze [performance symptom] in this [platform] project, identify measurable causes, and propose benchmarks before and after each change.
Design a Cross-Platform Release Plan
Design a secure release workflow for [iOS and Android], covering tests, signing, secrets, artifacts, staged rollout, monitoring, and rollback.

Best Practices

  • State the platform, framework version, existing architecture, and deployment target before requesting changes.
  • Measure performance before optimization and define a repeatable benchmark for every proposed improvement.
  • Review commands, dependency sources, signing changes, and release actions before execution.

Avoid

  • Do not request a complete application without product requirements, platform constraints, or acceptance criteria.
  • Do not copy sample endpoints, credentials, package versions, or signing settings directly into production.
  • Do not run cleanup, installation, build, or publishing commands without reviewing their scope and side effects.

Frequently Asked Questions

Which mobile platforms does this skill cover?
It covers native iOS, native Android, Flutter, React Native, and related mobile delivery workflows.
Can it choose a framework for a new application?
Yes. Provide team skills, feature requirements, performance needs, native integrations, schedule, and maintenance constraints.
Can it generate production-ready code?
It can produce implementation guidance and code patterns, but teams must review, test, secure, and adapt every result.
Does it publish applications automatically?
No. Store publishing requires credentials, signing assets, account access, policy checks, and explicit human approval.
How should package mirrors be handled?
Verify ownership, transport security, package integrity, and organizational policy before changing any registry or repository.
How can sensitive data stay out of logs?
Disable body logging in production, redact secrets and personal data, and test logging behavior in release builds.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

3 downloads · 1 views

File structure

More from zl2023github

View all
View all