CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

mobile-security

Analyze Android or iOS game-security trust boundaries, packages, native code, platform integrity, instrumentation, attestation, and signing. Use when mobile OS or device behavior is central.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

92%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exemplary hub-style skill body: token-efficient, unambiguous routing with an explicit evidence-first gate, and a verified one-level-deep reference bundle. The only minor gap is that the routing pointers give no concrete starting commands, leaving execution details entirely to the reference files.

DimensionReasoningScore

Conciseness

The 18-line body is lean and efficient — one imperative fact-collection instruction, a routing table, and two escalation rules. Every token earns its place and nothing explains concepts Claude already knows, matching anchor 5 exactly.

5 / 5

Actionability

'Record the device, OS build, ABI, package signer, entitlements, privilege state, and collection method before drawing conclusions' is a concrete checklist, and the routing table names exact files with per-file topic coverage. It stops short of anchor 5 because no commands or examples show how to perform any of the inspections — guidance ends at routing.

4 / 5

Workflow Clarity

The sequence is unambiguous with an explicit gate ('before drawing conclusions'), clearly partitioned topic routing, and escalation ('game-security-research-rigor' for version-sensitive claims) plus de-routing rules. This is a simple routing skill with no destructive or batch operations, so the simple-skill clarity exception applies.

5 / 5

Progressive Disclosure

The body is a clear overview with well-signaled one-level-deep references: all five linked files (android-and-ios.md, engines-rendering-and-network.md, platform-internals.md, repository-resources.md, repository-map.md) exist in references/ and each link is annotated with exactly what it covers. References do not nest further content — they point to external documentation — so navigation is easy, matching anchor 5.

5 / 5

Total

19

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: specific, appropriately scoped, third-person, and paired with an explicit 'Use when' clause. The main gap is that the trigger clause is condition-based rather than user-language-based, and a few natural synonyms are missing.

Suggestions

Make the 'Use when' clause name concrete triggers users would actually say, e.g. 'Use when the user mentions Android/iOS games, mobile cheating, root or jailbreak detection, APK/IPA inspection, or app signing/attestation.'

Add one or two natural synonyms or file extensions (e.g. 'APK', 'IPA', 'cheat detection') to broaden trigger-term coverage without adding length.

DimensionReasoningScore

Specificity

The single concrete verb 'Analyze' governs a specific, enumerated set of targets ('trust boundaries, packages, native code, platform integrity, instrumentation, attestation, and signing'), which matches anchor 4 (several specific items, minor gaps). It is not anchor 5 because only one action verb is used — there are no additional concrete actions or outputs named.

4 / 5

Completeness

It answers both 'what' (analyze the enumerated mobile game-security areas) and 'when' with an explicit 'Use when mobile OS or device behavior is central' clause, matching anchor 4. Not anchor 5 because the trigger is abstract — it states a condition rather than concrete trigger phrases users would say.

4 / 5

Trigger Term Quality

Good natural keyword coverage ('Android', 'iOS', 'mobile OS', 'device behavior', 'signing', 'attestation', 'packages'), fitting anchor 4. It falls short of anchor 5's comprehensive synonym coverage because common user phrasings like 'root', 'jailbreak', 'APK', or 'cheat detection' are absent.

4 / 5

Distinctiveness Conflict Risk

It carves a clear niche — Android/iOS game security — with distinct trigger territory (attestation, signing, platform integrity, instrumentation) and minimal overlap risk with general engine, network, or kernel skills. It is not anchor 4 because no closely related skill would plausibly capture these same triggers.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

gmh5225/awesome-game-security

Path

.claude/skills/mobile-security/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.