技能 mobile-engineer
📦
mobile-engineer
內容修訂 r2 中風險 🌐 網路存取⚙️ 外部命令
Build and Improve Mobile Applications
Mobile teams must coordinate platform architecture, tooling, testing, performance, and release requirements. This skill provides practical guidance and examples for native and cross-platform workflows.
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "mobile-engineer" from https://skillstore.io/skills/zl2023github-mobile-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-mobile-engineer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「mobile-engineer」。 Plan architecture for a 20-screen Flutter commerce application with offline browsing.
預期結果:
- Use MVVM with repository boundaries and Riverpod state management.
- Use Drift for offline data, Dio for networking, and GoRouter for navigation.
- Validate startup time, list rendering, cache behavior, and retry handling.
正在使用「mobile-engineer」。 Diagnose a React Native Android build that fails after dependency updates.
預期結果:
- Compare the Node, Java, Gradle, Android plugin, and React Native compatibility ranges.
- Reproduce from a clean cache, then restore dependencies incrementally.
- Record the failing task and first actionable stack trace before changing configuration.
安全審計
中風險v4 • 2026/7/23 開啟版本化報告
All 55 static alerts are false positives caused by Markdown syntax, mobile tool names, explicit HTTPS examples, and a fixed Xcode cache path. No prompt injection, credential exposure, obfuscated payload, host reconnaissance, or unbounded root deletion appears in the reviewed files. Semantic review identified unpinned package execution and unconditional response-body logging as medium risks.
2
已掃描檔案
326
分析行數
0
複核項目
0
已忽略的誤報
已確認的安全問題 (2)
中
Unpinned Package Execution
Setup examples invoke react-native@latest, unversioned create-expo-app, and unpinned npm dependencies. A compromised future release could execute during project initialization or installation.
The commands directly resolve and execute packages without immutable versions or integrity controls. This is a recognized software supply-chain exposure.
中
Unconditional API Response Logging
The API example enables response-body logging without a release guard. Responses may contain tokens or personal data that can reach device or CI logs.
The interceptor is added unconditionally with responseBody enabled. The example shows no environment check, redaction, or production disablement.
風險因素
🌐 網路存取 (9)
⚙️ 外部命令 (22)
SKILL.md:35-40 SKILL.md:40-43 SKILL.md:43-47 SKILL.md:47-79 SKILL.md:79 SKILL.md:83-94 SKILL.md:94-97 SKILL.md:97-103 SKILL.md:103-107 SKILL.md:107-122 SKILL.md:122-145 SKILL.md:145-153 SKILL.md:153-157 SKILL.md:157-169 SKILL.md:169-173 SKILL.md:173-181 SKILL.md:181-198 SKILL.md:198 SKILL.md:200-210 SKILL.md:210-224 SKILL.md:224-228 SKILL.md:228-234
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/zl2023github-mobile-engineer?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/zl2023github-mobile-engineer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zl2023github-mobile-engineer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/zl2023github-mobile-engineer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
zl2023github. (2026). mobile-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4BibTeX 引用
@techreport{zl2023github-zl2023github-mobile-engineer-2026,
author = {zl2023github},
title = {mobile-engineer security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mobile-engineer security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "zl2023github"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/zl2023github-mobile-engineer/audits/4"
identifiers:
- type: other
value: "skillstore:zl2023github-mobile-engineer:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 41
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Start a Mobile Project
Select a stack, initialize the project, and establish architecture, navigation, storage, and networking foundations.
Modernize an Existing Application
Review architecture, performance, security, and dependency choices before planning focused improvements.
Prepare a Store Release
Build a release checklist covering tests, signing, privacy declarations, monitoring, metadata, and deployment automation.
試試這些提示
Create a Starter Project
Create a [Flutter or React Native] project for [application type] with navigation, theming, and a clear folder structure.
Implement a Mobile Feature
Implement [feature] for [platform], using the existing architecture and including loading, empty, error, accessibility, and test states.
Diagnose a Performance Problem
Analyze [performance symptom] in this [platform] project, identify measurable causes, and propose benchmarks before and after each change.
Design a Cross-Platform Release Plan
Design a secure release workflow for [iOS and Android], covering tests, signing, secrets, artifacts, staged rollout, monitoring, and rollback.
最佳實務
- State the platform, framework version, existing architecture, and deployment target before requesting changes.
- Measure performance before optimization and define a repeatable benchmark for every proposed improvement.
- Review commands, dependency sources, signing changes, and release actions before execution.
避免
- Do not request a complete application without product requirements, platform constraints, or acceptance criteria.
- Do not copy sample endpoints, credentials, package versions, or signing settings directly into production.
- Do not run cleanup, installation, build, or publishing commands without reviewing their scope and side effects.
常見問題
Which mobile platforms does this skill cover?
It covers native iOS, native Android, Flutter, React Native, and related mobile delivery workflows.
Can it choose a framework for a new application?
Yes. Provide team skills, feature requirements, performance needs, native integrations, schedule, and maintenance constraints.
Can it generate production-ready code?
It can produce implementation guidance and code patterns, but teams must review, test, secure, and adapt every result.
Does it publish applications automatically?
No. Store publishing requires credentials, signing assets, account access, policy checks, and explicit human approval.
How should package mirrors be handled?
Verify ownership, transport security, package integrity, and organizational policy before changing any registry or repository.
How can sensitive data stay out of logs?
Disable body logging in production, redact secrets and personal data, and test logging behavior in release builds.
開發者詳細資訊
作者
zl2023github授權
MIT
Skillstore 修訂
r2
版本提示
作者未聲明版本。
引用
88a8e9a07f4c54ab105c1c41b6267c287146b07b
維護新鮮度
2026/7/26
使用量
3 次下載 · 1 次瀏覽
檔案結構