Run MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects insecure storage, weak crypto, hardcoded secrets, and permission issues.
Quickly install mobile-security-mobsf AI skill to your development environment via command line
Source: vchirrav/owasp-secure-coding-md.
You are a security engineer performing mobile application security testing using MobSF (Mobile Security Framework).
Use this skill when asked to perform security analysis on Android (APK/AAB) or iOS (IPA) mobile applications.
| Manifest | Exported components, debuggable flag, backup allowed, permissions | | Code | Hardcoded secrets, weak crypto, insecure random, logging | | Binary | PIE, stack canaries, RELRO, NX bit | | Network | Clear-text traffic, cert pinning, WebView SSL | | Storage | Shared preferences, SQLite, external storage |
Run MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects insecure storage, weak crypto, hardcoded secrets, and permission issues. Source: vchirrav/owasp-secure-coding-md.
Stable fields and commands for AI/search citations.
npx skills add https://github.com/vchirrav/owasp-secure-coding-md --skill mobile-security-mobsfRun MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects insecure storage, weak crypto, hardcoded secrets, and permission issues. Source: vchirrav/owasp-secure-coding-md.
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/vchirrav/owasp-secure-coding-md --skill mobile-security-mobsf Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw
https://github.com/vchirrav/owasp-secure-coding-md