React Native Security Audit

关于

Conducts comprehensive security assessments of React Native applications by scanning for hardcoded secrets, exposed personal data (PII), and insecure storage practices. This skill provides specialized guidance for validating authentication flows, reviewing network security, and ensuring compliance with mobile security best practices like the OWASP MASVS. It covers both the cross-platform JavaScript/TypeScript layer and native iOS/Android configurations, offering remediation strategies and automated scanning scripts to harden mobile applications against common threats.

主要功能

• Native configuration auditing for iOS Info.plist and AndroidManifest.xml security settings.
• Insecure storage analysis for AsyncStorage, Keychain, and Redux persistence configurations.
• Automated secret detection for API keys, tokens, and credentials across source code and config files.
• Network security review focusing on HTTPS enforcement, certificate pinning, and SSL verification.
• PII exposure scanning to identify leaked emails, phone numbers, and credit card patterns.
• 0 GitHub stars

使用场景

• Reviewing third-party dependencies and native permissions for potential data privacy risks.
• Aligning React Native application codebases with OWASP Mobile Application Security Verification Standard (MASVS) requirements.
• Performing a pre-release security audit to ensure no sensitive credentials or debug logs are shipped to production.