skills.rest
jassics
jassicsCOMMUNITY
Explore all skills by this author →
Website𝕏@jassicsGitHub

masvs-review

Review mobile applications against OWASP MASVS with static and runtime analysis.

6|Updated May 30, 2026
Search Tags:#vulnerability analysis#mobile security#security assessment#OWASP MASVS#app review
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill masvs-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: masvs-review
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/mobile-security/skills/masvs-review
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill masvs-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a structured review of mobile applications against the OWASP Mobile Application Security Verification Standard (MASVS), ensuring security and compliance.

Core Features & Use Cases

  • OWASP MASVS Compliance: Evaluate apps against the MASVS control groups (storage, crypto, auth, network, platform, code quality, and resilience).
  • Static and Runtime Analysis: Perform both static code analysis and runtime checks to uncover vulnerabilities.
  • Reporting: Generate a report with findings, severity levels, and remediation steps.

Quick Start

To review an app against MASVS, first gather the app package (APK/IPA) and source code if available. Then, use the 'masvs-review' skill with the appropriate command, such as '/masvs-review:storage'.

Frequently Asked Questions about masvs-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess mobile app security against OWASP MASVS controls?▼

To assess mobile app security against OWASP MASVS, perform static code analysis and runtime checks on the app package and source code to evaluate storage, crypto, auth, network, platform, code quality, and resilience controls.

What do I need to perform an OWASP MASVS security assessment?▼

To perform an OWASP MASVS security assessment, you need the mobile app package (APK or IPA) and the application source code to enable both static code analysis and runtime vulnerability checks.

How does mobile app vulnerability analysis generate remediation steps?▼

Mobile app vulnerability analysis generates remediation steps by reviewing the app against MASVS control groups, identifying findings, assigning severity levels, and outputting a detailed security report.

Can I evaluate mobile app resilience and code quality using static and runtime analysis?▼

Yes, you can evaluate mobile app resilience and code quality by performing both static code analysis and runtime checks to uncover vulnerabilities and verify compliance with the respective MASVS control groups.

What is the best way to review an app package for MASVS storage compliance?▼

The best way to review an app package for MASVS storage compliance is to run a targeted vulnerability analysis on the APK or IPA and source code to identify findings and generate remediation steps.

Related Skills

Explore More Software Engineering Skills→
BrownFineSecurityBrownFineSecurity
811

jadx

Decompile Android APK DEX bytecode into readable Java source code.

Official
Advanced
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
salmanabdurrahmansalmanabdurrahman

mobile-ios-dynamic

Performs iOS app runtime instrumentation, traffic interception, sandbox inspection for security vulnerabilities using Frida and Objection.

Community
Advanced
gglessnergglessner
2

corellium-mcp

Orchestrate mobile penetration testing with Corellium virtual devices and Parley traffic interception.

Community
Advanced