Install
$ agentstack add skill-jasonthedeveloper-owasp-skills-mobile-vulnerabilities ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Mobile Vulnerabilities — Skill Entry
This SKILL.md is the entrypoint for the Mobile Vulnerabilities skill.
The skill encodes the OWASP Mobile Top 10 as structured, machine-readable references that an agent can query to identify, assess, and remediate mobile application security risks.
Normative references (Mobile Top 10)
- [00 Vulnerability Index](references/00-vulnerability-index.md)
- [01 Improper Credential Usage](references/01-improper-credential-usage.md)
- [02 Inadequate Supply Chain Security](references/02-inadequate-supply-chain-security.md)
- [03 Insecure Authentication and Authorization](references/03-insecure-authentication-authorization.md)
- [04 Insufficient Input/Output Validation](references/04-insufficient-input-output-validation.md)
- [05 Insecure Communication](references/05-insecure-communication.md)
- [06 Inadequate Privacy Controls](references/06-inadequate-privacy-controls.md)
- [07 Insufficient Binary Protection](references/07-insufficient-binary-protection.md)
- [08 Security Misconfiguration](references/08-security-misconfiguration.md)
- [09 Insecure Data Storage](references/09-insecure-data-storage.md)
- [10 Insufficient Cryptography](references/10-insufficient-cryptography.md)
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Mobile Top 10 normative documents.00-vulnerability-index.md— master index of all vulnerability identifiers, categories, and cross-references.01through10— one document per vulnerability aligned with OWASP Mobile Top 10 numbering.assets/— reusable format and constants blocks.constants/— vulnerability catalog and category definitions.constants-mobile-catalog-v1.0.0.mdformats/— output contract examples.format-vulnerability-assessment-v1.0.0.mdformat-remediation-checklist-v1.0.0.md
Third-Party Attribution
Copyright © OWASP Foundation. OWASP® Mobile Top 10 content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (). Source: Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: JasonTheDeveloper
- Source: JasonTheDeveloper/owasp-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.