Does it check for HTTPS enforcement?

Yes, it specifically reviews how URLs are constructed and validated, ensuring that HTTPS and proper pinning/versioning are utilized for remote content.

Can this skill automatically fix my security vulnerabilities?

No, it is designed to provide detailed remediation steps ordered by severity. It does not modify your files by default to ensure you maintain full control over your security implementation.

What information does this skill require to work?

It works best when you provide access to your WebF project files or mention specific concerns regarding untrusted remote bundles and URL allowlists.

When should I use this skill instead of the store guidelines skill?

Use this skill for technical implementation risks like URL validation and trust boundaries. Use the store guidelines skill when specifically asking about policy compliance for App Store or Play Store submissions.

What does the OpenWebF Remote Content Security skill do?

It audits WebF applications for security risks associated with loading remote content, such as untrusted bundles, insecure URLs, and bridge vulnerabilities.

OpenWebF Remote Content Security

Name: OpenWebF Remote Content Security
Author: archview-ai

byarchview-ai

セキュリティとテスト

Audits and secures remote bundle loading and trust boundaries within WebF-based applications to prevent security vulnerabilities.

概要

This skill provides specialized security auditing for WebF applications that load remote content, focusing on identifying vulnerabilities in untrusted bundles and URL validation. It helps developers establish robust trust boundaries by reviewing allowlists, HTTPS enforcement, and native bridge interactions, ensuring that remote updates and external integrations comply with security best practices and platform guidelines. By leveraging MCP documentation, it provides prioritized remediation steps to mitigate risks like clickjacking and unauthorized script execution.

主な機能

Verifies HTTPS enforcement and SSL pinning
Assesses remote update risks for store compliance
Identifies trust boundaries for remote bundles
Audits URL construction and validation logic
0 GitHub stars
Reviews bridge and native plugin security

ユースケース

Auditing URL allowlists to prevent unauthorized code execution
Verifying application compliance with store policies regarding remote updates
Securing a WebF app that dynamically loads UI bundles from a remote server

概要

主な機能

Verifies HTTPS enforcement and SSL pinning
Assesses remote update risks for store compliance
Identifies trust boundaries for remote bundles
Audits URL construction and validation logic
0 GitHub stars
Reviews bridge and native plugin security

ユースケース

Auditing URL allowlists to prevent unauthorized code execution
Verifying application compliance with store policies regarding remote updates
Securing a WebF app that dynamically loads UI bundles from a remote server