Owasp Mobile Security Checker
Four Python scanners that automate the grunt work of mobile security audits: hardcoded secrets, vulnerable dependencies, network config issues, and insecure storage. Each spits out JSON with severity ratings so you can triage before release. The other six OWASP Mobile Top 10 risks need manual review, but you get a reference doc with Flutter-specific vulnerability patterns and code examples. Honest take: this won't replace a real pentest, but it's solid for catching the obvious stuff in CI or before you ship. Works best if you're already familiar with OWASP mobile risks and just need tooling to move faster.
- skills.sh installs
- 494
- GitHub stars
- 68
- last updated
- Aug 21, 2026
Install
$ npx -y skills add harishwarrior/flutter-claude-skills --skill owasp-mobile-security-checker --agent claude-codeInstalls into .claude/skills of the current project.
Files
OWASP Mobile Security Checker
Requirements
- Python 3.7+
- Flutter/Dart project with
pubspec.yaml - Android and/or iOS targets
- Run scripts from the project root directory
Comprehensive security analysis for Flutter and mobile applications based on OWASP Mobile Top 10 (2024).
Automated Scanners
Four Python scanners cover the most automatable risk categories. Replace <skill-dir> with the skill's install path (e.g. ~/.claude/skills/owasp-mobile-security-checker):
M1 — Hardcoded Secrets
python3 <skill-dir>/scripts/scan_hardcoded_secrets.py /path/to/project
Detects API keys, tokens, passwords, AWS credentials, and Firebase keys in Dart code and config files.
M2 — Dependency Vulnerabilities
python3 <skill-dir>/scripts/check_dependencies.py /path/to/project
Analyzes pubspec.yaml for outdated packages, any version constraints, and known CVEs.
M5 — Network Security
python3 <skill-dir>/scripts/check_network_security.py /path/to/project
Checks HTTP vs HTTPS usage, certificate pinning, Android Network Security Config, and iOS ATS settings.
M9 — Insecure Storage
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/harishwarrior/flutter-claude-skills
- Categories
- Security, Automation & Workflows, Mobile Development
- First seen
- Jun 3, 2026
More from harishwarrior/flutter-claude-skills
All 2Recommended
More Security
security-scanning-security-hardeningsickn33/antigravity-awesome-skillssecurity scanning security hardening507skills.sh installs
owasp-security-checksergiodxa/agent-skillsSecurity audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, 1.7Kskills.sh installs
openclaw-security-hardeningaradotso/security-skillsopenclaw security hardening971skills.sh installs
authentication-authorization-clerkharperaa/secure-claude-skillsImplement secure authentication and authorization using Clerk. Use this skill when you need to authenticate users, protect routes, check permissions, implement 187skills.sh installs