Agent skill
security-audit
Scans code for security vulnerabilities, hardcoded secrets, and unsafe patterns in React Native and Expo applications. Use before merging sensitive changes or as part of a regular audit.
Install this agent skill to your Project
npx add-skill https://github.com/dtsvetkov1/agent-rules/tree/main/skills/security-audit
SKILL.md
Security Audit Skill
This skill focuses on making the application robust against common mobile security threats.
Instructions
- Secret Scanning: Check for API keys, passwords, or tokens in the codebase.
- Data Storage: Ensure sensitive data is stored in
expo-secure-storeand notAsyncStorage. - Network: Verify that all API calls use HTTPS and that SSL pinning is considered for high-security apps.
- Input Validation: Check for unsanitized inputs that could lead to XSS or injection.
- Permissions: Review
app.jsonfor unnecessary permissions.
Tools to Simulate/Use
bunx audit(for dependencies)- Custom grep patterns for secrets (e.g.,
sk-,AIza,ghp_) - Checking for
dangerouslySetInnerHTMLin web-related components.
See Mobile Security Checklist for a comprehensive list.
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
dtsvetkov1/agent-rules
change-writer
Generates clean, human-readable changelogs and release notes from git commits and file changes. Use when preparing for a release or summarizing recent work.
dtsvetkov1/agent-rules
doc-sync
Ensures that documentation files like README.md and AGENTS.md stay in sync with the actual code and project structure. Use when adding new features or changing project architecture.
dtsvetkov1/agent-rules
navigation-architect
Designs and implements navigation flows using Expo Router (file-based routing). Use when adding new screens, handling deep links, or restructuring the app's layout.
dtsvetkov1/agent-rules
api-expert
Handles backend integration using best practices like expo/fetch and React Query. Use when the user needs to connect to an API, handle data fetching, or implement caching.
dtsvetkov1/agent-rules
opinion-critic
Provides critical feedback and alternative architectural perspectives on code changes. Use when you want to explore different ways to implement a feature or find potential flaws in the current plan.
dtsvetkov1/agent-rules
mobile-perf
Optimizes React Native Expo applications for speed, responsiveness, and battery efficiency. Use when fixing lag, optimizing lists, or reducing bundle size.
Didn't find tool you were looking for?