Skip to content

Add mobile secret storage review skill#2581

Closed
YfengJ wants to merge 1 commit into
UnitOneAI:mainfrom
YfengJ:codex/mobile-secret-storage-296
Closed

Add mobile secret storage review skill#2581
YfengJ wants to merge 1 commit into
UnitOneAI:mainfrom
YfengJ:codex/mobile-secret-storage-296

Conversation

@YfengJ

@YfengJ YfengJ commented Jun 14, 2026

Copy link
Copy Markdown

/claim #296

Summary

  • add mobile-secret-storage-review for Android/iOS local token and secret storage reviews
  • cover plaintext preferences, Keychain/Keystore controls, backup and sync leakage, logs/screenshots/clipboard, debug-build drift, and logout/compromise lifecycle gates
  • add vulnerable and benign JSON fixtures plus README, index, and role bundle updates

Validation

  • test -f skills/appsec/mobile-secret-storage-review/SKILL.md and fixture existence checks
  • ruby -ryaml -e ... index validation: 46 skills, new skill present, role bundles include it
  • find tests -name '*.json' -print0 | xargs -0 -n1 jq empty\n- Markdown fence check across skills/**/*.md\n- privacy scan for PayPal/wallet/payment strings\n- git diff --check and git diff --cached --check\n\nRequested bounty tier: Intermediate ($350). Payment details can be provided privately after maintainer acceptance.

@YfengJ YfengJ requested a review from kamalsrini as a code owner June 14, 2026 16:58
@YfengJ YfengJ force-pushed the codex/mobile-secret-storage-296 branch from 5cf6e74 to 0619b79 Compare June 14, 2026 18:02
@YfengJ YfengJ force-pushed the codex/mobile-secret-storage-296 branch from 0619b79 to c0f3216 Compare June 14, 2026 18:30
@kamalsrini kamalsrini closed this Jun 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants