OpenAgentSkillRegistry
ResolveSkillsTasksPacksCompareAPIDocs
Star0Submit Skill
Star0
Skills/development/Mobsfscan

Mobsfscan

REVIEW · 73
Community indexed

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Downloads0
Stars761
Version1.0.0
Quality76/100 · Strong
Trust73/100 · Sandbox only
Audit82/100 · Safe to try

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add MobSF/mobsfscan

Maintenance

active

4mo since push

Risk

Safe to try

Quality score needs review

GitHub quality

761

76/100 quality · 81/100 trust

Coverage tags

CodingCoding agentsdevelopmentstatic-analysiscode-quality

Review notes

Quality score needs review

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Strong
76

Solid option that is likely worth shortlisting for production workflows.

Trust

Sandbox only
73

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Safe to try
82

Install readiness, security metadata, maintenance, and adoption risk.

Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

PythonStatic AnalysisCodexClaude CodeCursor

Stars

761 GitHub stars

Repo activity

761 stars, 123 forks

Maintenance

4mo since push

License

LGPL-3.0

Install

npx skills add MobSF/mobsfscan

Install safety

standard package or runtime install path

Permission surface

filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Strong README/SKILL.md context

Risk summary

Review before production

  • Quality score needs review

Install readiness

Install path available

  • Install path is available
  • Repository evidence is available
  • License is declared
  • No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

Open JSON

Suited tasks

  • Coding agents workflows
  • Claude Code teams
  • teams that value GitHub adoption signals
  • Inspect source files

Suited agents

PythonStatic AnalysisCodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command
npx skills add MobSF/mobsfscan
Policy
review
Human review
yes

Trust and risk

Trust
73/100
Audit
82/100
Risk level
Safe to try

Outcome loop

Endpoint
/api/agent/outcome
Event ID
resolve
Outcomes
5

Install command

npx skills add MobSF/mobsfscan
Public auditEval reportResolve APIInstall handoff

Do not use when

  • teams that need a vendor-supported SLA
  • high-compliance environments without internal security review
  • No major risk signals from current metadata
  • Quality score needs review
  • Production credentials, payments, or irreversible account changes without explicit human review

Alternative

Graphify

92.0K stars

npx skills add Graphify-Labs/graphify

Alternative

Gemini CLI

106.1K stars

npx skills add google-gemini/gemini-cli

Alternative

System Prompts And Models Of AI Tools

141.2K stars

npx skills add x1xhlol/system-prompts-and-models-of-ai-tools

Alternative

Taste Skill

65.0K stars

npx skills add Leonxlnx/taste-skill

Agent safety v2

66/100 · Review before install

Reviewed with permission notesreview

Usable candidate, but the agent should surface permission and audit notes before installation.

Require human approval before installing into a real workspace.

Resolve via API

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

  • Quality score needs review

Install targets

Install this skill in your agent workflow

Copy the registry command or an agent-specific install prompt for Codex, Claude Code, and Cursor.

skill install

OpenAgentSkill CLI

Use the registry command when your workflow supports the OpenAgentSkill installer.

$ npx skills add MobSF/mobsfscan

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Resolve JSON

/api/agent/resolve?task=Use%20Mobsfscan%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20Mobsfscan%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/mobsf-mobsfscan/install

Agent should check

  • Task fit and alternatives from Resolve API.
  • Audit score, trust score, and safety policy warnings.
  • Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use Mobsfscan in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Mobsfscan%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/mobsf-mobsfscan/install
Install command: npx skills add MobSF/mobsfscan
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/mobsf-mobsfscan/install

LLM text format

/api/skills/mobsf-mobsfscan/install?format=text

Find alternatives

/api/skills/search?q=Mobsfscan&limit=3

Agent prompt

Use Mobsfscan for this task. Review https://www.openagentskill.com/api/skills/mobsf-mobsfscan/install, then install with: npx skills add MobSF/mobsfscan

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/mobsf-mobsfscan

LLM text

/api/registry/manifest/mobsf-mobsfscan?format=text

Install alias

/api/registry/install/mobsf-mobsfscan

Recommend

/api/registry/recommend?task=Use%20Mobsfscan%20in%20an%20agent%20workflow&limit=3

Agent fit

90/100

Coding agents

Use-case tags

Coding agentsGitHub automationRAG and knowledge

Platforms

Python, Static Analysis, Claude Code

Audit report

Safe to try · 82/100

Review install readiness, maintenance, trust, quality, and metadata warnings before adding this skill to an agent workflow.

View audit reportView eval report

Agent decision cockpit

Primary pick for Coding agents

Use this as a leading candidate, then validate the README and install path in your own agent stack.

90
Readiness
Adopt
Stage

Role in stack

Primary pick

Primary fit

Coding agents

Trust label

Production-ready

Install path

Command ready

Use when

  • Coding agents workflows
  • Claude Code teams
  • teams that value GitHub adoption signals

Evidence

  • 761 GitHub stars
  • recent repository activity
  • install command or GitHub repo available
  • 76/100 quality profile
  • 11 OpenAgentSkill engagement events

Review first

  • No major risk signals from current metadata

Implementation path

  1. 1Install it in a sandbox agent and run one Coding agents task end to end.
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

73
Trust score

GitHub adoption

INFO

761 GitHub stars

Stars/forks activity

INFO

761 stars, 123 forks; issue activity unavailable in current metadata

Recent maintenance

INFO

4mo since push

License clarity

PASS

LGPL-3.0

Good signals

  • AI review approved
  • Install path is available
  • Repository evidence is available
  • Meaningful GitHub adoption signal
  • Install command has no obvious high-risk pattern
  • Outcome loop is ready but needs first real agent run

Review before install

  • Quality score needs review
  • No real agent outcome reports yet
  • Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Strong candidate for agent workflows

Solid option that is likely worth shortlisting for production workflows.

76
GitHub stars
761
Freshness
4mo ago
Install ready
Yes
License
LGPL-3.0

Workflow fit

Use this skill in these scenarios

Build and ship code

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Manage repositories

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Search private knowledge

RAG and knowledge

I need my agent to build a RAG workflow over documents and retrieve reliable context.

Stack fit

Add it to a complete workflow

Inspect, patch, and verify code

Coding review agent

A stack for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.

Turn skills into distribution

Content growth agent

A stack for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Ingest, retrieve, and cite

RAG knowledge base

A stack for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.

Alternative shortlist

Compare before you install

Similar skills in this category, ranked with the same readiness and quality signals.

Compare all

Graphify

A tool that converts codebases, SQL schemas, and other files into queryable knowledge graphs for AI coding assistants.

Adopt
Ready100
Quality100
Stars92.0K

Gemini CLI

Bring a coding agent directly into the terminal

Adopt
Ready100
Quality100
Stars106.1K

System Prompts And Models Of AI Tools

FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sourced) System Prompts, Internal Tools & AI Models

Adopt
Ready100
Quality100
Stars141.2K

Taste Skill

A portable AI agent skill that enhances AI-generated user interfaces with better layout, typography, motion, and spacing to avoid generic outputs.

Adopt
Ready100
Quality100
Stars65.0K

Overview

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Imported by the skill-only GitHub discovery pipeline because it matches agent skill, automation, domain workflow, RAG, document-processing, data, finance, security, or developer-tool signals. Protocol-server projects are excluded from automated imports.

Platform Compatibility

pythonFULL
static-analysisFULL

Technical Details

Version
1.0.0
License
LGPL-3.0
Last Updated
6/14/2026
Published
5/24/2026

Frameworks & Tools

PythonStatic Analysis

Decision snapshot

Primary pick

90
Ready
Adopt
Stage

761 GitHub stars

Audit snapshot

Install review

Install and adoption review

82
Safe to try
Security
89/100
Maintenance
76/100
Install
92/100
Open full auditOpen eval report

Agent-proven evidence

Agent Proven evidence

Outcome reports after resolve, review, install, and one narrow run.

0
Proven
Needs first agent runAuto-install: review firstLast: Unknown
Success rate
—
Recent failure
—
Outcomes
0
Output quality
—
Failed
0
Not relevant
0
Installs
0
Risk blocked
0
Setup needed
0
Production
0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven rankingOutcome contract

Install

Add to agent workflow

Free and open source. Review the audit before production use.

Compare AlternativesAuto-resolve PlanView on GitHubDocumentation

Growth loop

Share kit

X

Scenario-led draft for Mobsfscan, ready for a manual X post.

Curator note
Most coding agents don't fail from lack of model power. They fail when repo context disappears.

Mobsfscan gives coding agents a repeatable way to plan, patch, review, or ship.

761 stars

https://www.openagentskill.com/skills/mobsf-mobsfscan?ref=x
#AIAgents
Open X draft
Optional reply with install command
Listing + install path for Mobsfscan:
https://www.openagentskill.com/skills/mobsf-mobsfscan?ref=x

Install: npx skills add MobSF/mobsfscan
Open reply draft

Listing source

Community indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator
MobSF
Source
MobSF/mobsfscan
Indexed by
OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This community indexed listing is attributed to MobSF but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/mobsf-mobsfscan?metric=listed&label=Listed)](https://www.openagentskill.com/skills/mobsf-mobsfscan)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/mobsf-mobsfscan?metric=trust&label=Trust)](https://www.openagentskill.com/skills/mobsf-mobsfscan)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/mobsf-mobsfscan?metric=audit&label=Audit)](https://www.openagentskill.com/skills/mobsf-mobsfscan/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/mobsf-mobsfscan?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/mobsf-mobsfscan)
Preview badge Open audit Creator Kit

Author

M

MobSF

@mobsf

Tags

static-analysiscode-qualityandroidappseccodereviewiosjavakotlinmobile-sastobjective-c

Platform Fit

Claude Code

Health Signals

GitHub stars
761
Quality score
47/100
Last GitHub push
Mar 12, 2026
Framework hints
2
OpenAgentSkill views
7
Install copies
0
Outbound clicks
0

Community Signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & Safety

Sandbox only

73
  • GitHub adoption761 GitHub starsINFO
  • Stars/forks activity761 stars, 123 forks; issue activity unavailable in current metadataINFO
  • Recent maintenance4mo since pushINFO
  • License clarityLGPL-3.0PASS
  • README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
  • Dependency/runtime riskno major dependency risk hints in public metadataPASS

Related Skills

Graphify

A tool that converts codebases, SQL schemas, and other files into queryable knowledge graphs for AI coding assistants.

92.0K stars · 0 installs

Gemini CLI

Bring a coding agent directly into the terminal

106.1K stars · 0 installs

System Prompts And Models Of AI Tools

FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sourced) System Prompts, Internal Tools & AI Models

141.2K stars · 0 installs

Taste Skill

A portable AI agent skill that enhances AI-generated user interfaces with better layout, typography, motion, and spacing to avoid generic outputs.

65.0K stars · 0 installs
OpenAgentSkill

The skill layer for AI agents: discover, compare, audit, and install reusable capabilities across Codex, Claude Code, Cursor, and agent runtimes.

GitHubX

Explore

SkillsAgent SkillsWhat Is an Agent Skill?AI Agent SkillsTasksSkill PacksBest SkillsTrendingStacksUse CasesAgentsAgent Entry

Trust

CompareSafety GateSkills RegistryRankingsOutcomesAuditsOfficialWeekly ReportsMonthly IndexState of Agent Skillsvs skills.shAgentSkills.io Alternative

Build

DocsAbout OpenAgentSkillAPIllms.txtOpenAPICLICreator KitX Growth KitSubmitBlogGuidesActivity
OpenAgentSkill Registry
PrivacyBuilt for agent-native discovery