Skip to main content

mobile-security

Mobile app security practices

소스 정보

저장소
ffsshhttiikk/opencode-agents-skills
최근 소스 활동
2026년 2월 28일 22:52
감지된 SKILL.md 언어
영어
스타
3
포크
2

설치 방법

기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.

소스 파일 검토

설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.

SKILL.md 표시 중

SKILL.md
소스 지침 · 읽기 전용 미리보기
name
mobile-security
description
Mobile app security practices
license
MIT
compatibility
opencode
metadata
{"audience":"mobile-developers","category":"mobile-development"}
## What I do - Secure mobile applications against common vulnerabilities - Implement secure data storage and encryption - Protect against reverse engineering and tampering - Secure network communications - Implement authentication and authorization - Handle sensitive data properly - Conduct security assessments for mobile apps ## When to use me Use me when: - Building mobile apps with sensitive user data - Apps requiring secure payment handling - Enterprise apps with corporate data - Apps subject to security compliance (HIPAA, PCI-DSS) - Implementing biometric authentication - Preparing security audit documentation ## Key Concepts ### OWASP Mobile Top 10 Critical mobile security risks: 1. Improper Credential Usage 2. Inadequate Supply Chain Security 3. Insecure Authentication/Authorization 4. Insufficient Input/Output Validation 5. Insecure Communication 6. Inadequate Privacy Controls 7. Insufficient Binary Protections 8. Security Misconfiguration 9. Insecure Data Storage 10. Insufficient Cryptography ### Secure Data Storage **Android (EncryptedSharedPreferences):** ```kotlin val masterKey = MasterKey.Builder(context) .setKeyScheme(MasterKey.KeyScheme.AES256_GCM) .build() val securePrefs = EncryptedSharedPreferences.create( context, "secure_prefs", masterKey, EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV, EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM ) securePrefs.edit().putString("token", authToken).apply() ``` **iOS (Keychain):** ```swift let query: [String: Any] = [ kSecClass: kSecClassGenericPassword, kSecAttrService: "com.app.service", kSecAttrAccount: "authToken", kSecValueData: token.data(using: .utf8)! ] SecItemAdd(query as CFDictionary, nil) ``` ### Code Obfuscation - **Android**: ProGuard, R8, DexGuard - **iOS**: LLVM obfuscation, symbol stripping ### Network Security - TLS 1.3 minimum - Certificate pinning - No sensitive data in URLs - Secure WebViews configuration
GitHub에서 보기