rn-security-audit
✓Security audit skill for React Native applications. Use when reviewing code for vulnerabilities, detecting leaked secrets (API keys, tokens, credentials), identifying exposed personal data (PII), checking insecure storage, validating authentication flows, reviewing network security, and ensuring compliance with mobile security best practices (OWASP MASVS). Covers both JavaScript/TypeScript and native iOS/Android code.
Installation
SKILL.md
Identify vulnerabilities and sensitive data exposure in React Native apps.
| Secrets | No hardcoded API keys | CRITICAL | | Secrets | No credentials in code | CRITICAL | | Secrets | .env files in .gitignore | CRITICAL | | Storage | Tokens in Keychain/Keystore | HIGH | | Storage | No PII in AsyncStorage | HIGH | | Network | All endpoints HTTPS | HIGH | | Network | Certificate pinning enabled | MEDIUM |
| Auth | Tokens not logged | HIGH | | Auth | Secure token refresh flow | HIGH | | Auth | Biometrics properly implemented | MEDIUM | | Logging | No sensitive data in logs | HIGH | | Logging | Console.log stripped in prod | MEDIUM | | Native | allowBackup=false (Android) | HIGH | | Native | debuggable=false (Android) | HIGH |
Facts (cite-ready)
Stable fields and commands for AI/search citations.
- Install command
npx skills add https://github.com/johanruttens/paddle-battle --skill rn-security-audit- Category
- !Security
- Verified
- ✓
- First Seen
- 2026-02-01
- Updated
- 2026-02-18
Quick answers
What is rn-security-audit?
Security audit skill for React Native applications. Use when reviewing code for vulnerabilities, detecting leaked secrets (API keys, tokens, credentials), identifying exposed personal data (PII), checking insecure storage, validating authentication flows, reviewing network security, and ensuring compliance with mobile security best practices (OWASP MASVS). Covers both JavaScript/TypeScript and native iOS/Android code. Source: johanruttens/paddle-battle.
How do I install rn-security-audit?
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/johanruttens/paddle-battle --skill rn-security-audit Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code or Cursor
Where is the source repository?
https://github.com/johanruttens/paddle-battle
Details
- Category
- !Security
- Source
- skills.sh
- First Seen
- 2026-02-01