security-app-mobile

Automate mobile app security reviews against OWASP MASVS and MASTG standards.

Updated May 28, 2026
One-click install
npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-app-mobile
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-app-mobile
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-app-mobile
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-app-mobile

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires appsec-sdk, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive security overlay for iOS and Android apps, aligning with OWASP MASVS and MASTG standards, helping developers ensure their applications are secure and compliant.

Core Features & Use Cases

  • MASVS Compliance: Ensures alignment with OWASP Mobile Application Security Verification Standard 2.x.
  • MASTG Testing Guide: Adheres to the OWASP Mobile Application Security Testing Guide 2.x.
  • 8 Control Groups: Addresses 8 key control groups of MASVS, including Storage, Crypto, Auth, Network, Platform, Code, Resilience, and Privacy.
  • Automated Security Reviews: Conducts automated security reviews for iOS and Android apps.
  • Use Case: Ideal for developers looking to secure their mobile applications by following established security standards and best practices.

Quick Start

Run the 'security-app-mobile' skill to begin a security review for your iOS or Android app.

Frequently Asked Questions about security-app-mobile

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate mobile app security reviews against OWASP MASVS and MASTG standards?

You can automate mobile app security reviews by running a skill that checks iOS and Android applications against OWASP MASVS and MASTG standards, evaluating 8 key control groups including storage, crypto, auth, and network security.

Does OWASP MASVS compliance testing support both iOS and Android platforms?

Yes, OWASP MASVS compliance testing supports both iOS and Android platforms, focusing on security controls across storage, cryptography, authentication, network communication, platform interactions, code quality, resilience, and privacy.

What security controls are evaluated during an OWASP MASTG testing guide assessment?

An OWASP MASTG testing guide assessment evaluates 8 control groups: storage, crypto, auth, network, platform, code, resilience, and privacy, ensuring comprehensive coverage of mobile application security verification standards.

Can I use automated security reviews to check mobile application resilience and privacy controls?

Yes, automated security reviews can check mobile application resilience and privacy controls specifically, as these are two of the 8 key control groups addressed during the MASVS and MASTG compliance evaluation process.

Do I need the appsec-sdk dependency to conduct MASVS compliance checks for mobile apps?

Yes, the appsec-sdk is a required dependency to conduct MASVS compliance checks, providing the necessary foundational scripts and references to automate the security review process for mobile applications effectively.

What is the best way to ensure mobile app security verification aligns with OWASP Mobile Application Security Verification Standard 2.x?

The best way to ensure alignment with OWASP MASVS 2.x is to use an automated review skill that adheres to the MASTG 2.x testing guide, systematically verifying all 8 security control groups for your application.