Stats
Actions
Tags
From erne-universal
Performs security audits on React Native apps via checklists for data storage, network security, authentication, code practices, builds, iOS/Android specifics, and dependencies. Invoke before production, after auth/payment adds, or for reviews.
How this skill is triggered — by the user, by Claude, or both
Slash command
/erne-universal:security-reviewThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
You are performing a security audit on a React Native application. This skill provides a systematic security checklist specific to mobile apps.
You are performing a security audit on a React Native application. This skill provides a systematic security checklist specific to mobile apps.
Invoke when:
expo-secure-store (Expo) or Keychain/Keystore (bare)AsyncStorage (it's unencrypted).env is in .gitignoreeval() or dynamic code executionjavaScriptEnabled only when necessarynetworkSecurityConfig restricts cleartext trafficiOS:
Android:
android:allowBackup="false")npm audit)## Security Audit Report
### Risk Level: LOW / MEDIUM / HIGH / CRITICAL
### Findings
[Severity] [Category] — [Description]
Location: [file:line]
Recommendation: [fix]
### Summary
- Critical: N
- High: N
- Medium: N
- Low: N
- Passed: N checks
npx claudepluginhub jubakitiashvili/everything-react-native-expoAudits iOS and Android apps against OWASP MASVS/MASTG — covers insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, and reverse-engineering resistance.
Scans Capacitor and Ionic apps for 63+ security vulnerabilities using Capsec tool across secrets, storage, network, authentication, cryptography, and platform issues. Use for audits, CI/CD integration, and OWASP mobile checks.
Implements secure mobile coding practices for input validation, WebView security, secure data storage like Keychain/Keystore, and mobile authentication patterns.