security-audit
Scans code for security vulnerabilities, hardcoded secrets, and unsafe patterns in React Native and Expo applications. Use before merging sensitive changes or as part of a regular audit.
Resources
1Install
npx skillscat add dtsvetkov1/agent-rules/security-audit Install via the SkillsCat registry.
We need to produce a 2-3 sentence plain-text summary, objective, factual, no marketing language, no superlatives, no calls to action. Must be at most 60 words. No quotes, no markdown. Just plain text. We need to summarize: skill scans code for security vulnerabilities, hardcoded secrets, unsafe patterns in React Native and Expo apps. Problem: prevents security issues like secret leakage, insecure storage, network issues, XSS, unnecessary permissions. When to use: before merging sensitive changes or as part of regular audit. We need 2-3 sentences. Let's craft maybe 2 sentences ~45 words.
Security Audit Skill
This skill focuses on making the application robust against common mobile security threats.
Instructions
- Secret Scanning: Check for API keys, passwords, or tokens in the codebase.
- Data Storage: Ensure sensitive data is stored in
expo-secure-storeand notAsyncStorage. - Network: Verify that all API calls use HTTPS and that SSL pinning is considered for high-security apps.
- Input Validation: Check for unsanitized inputs that could lead to XSS or injection.
- Permissions: Review
app.jsonfor unnecessary permissions.
Tools to Simulate/Use
bunx audit(for dependencies)- Custom grep patterns for secrets (e.g.,
sk-,AIza,ghp_) - Checking for
dangerouslySetInnerHTMLin web-related components.
See Mobile Security Checklist for a comprehensive list.
Categories
Install
npx skillscat add dtsvetkov1/agent-rules/security-audit Install via the SkillsCat registry.