Agent skills for Codex CLI

Use when planning a MobiCom campaign across the rolling two-deadlines-per-year calendar — deciding which round to target and which edition…

Ad mediation skill for rewarded video.

Guide a Flutter and Firebase app from first scope through independent iOS App Store and Android Play release paths using XcodeBuildMCP…

Pre-submission release auditor and fixer for mobile app repos — primarily Flutter, also native Android and iOS.

Enforce and detect server-side the authorization and workflow rules a mobile client cannot be trusted to keep.

Add binary protections and, above all, remove client-side trust against OWASP Mobile Top 10 M7.

Abuse insecure deep links and inter-app entry points during an authorized mobile assessment.

Harden a mobile app's deep links and inter-app entry points so a crafted link cannot trigger sensitive actions, redirect callbacks, or…

The following patterns are "defaults" that AIs learned from training data.

Extract hardcoded secrets from a mobile app binary during an authorized mobile assessment.

Intercept and read a mobile app's network traffic during an authorized mobile assessment.

Use this skill when the user asks to set up, install, or configure "mobile-mcp" (the AI-driven mobile device automation MCP server) for…

Secure a mobile app's supply chain against OWASP Mobile Top 10 M2.

Demonstrate Inadequate Supply Chain Security (OWASP Mobile Top 10 M2) during an authorized mobile assessment — showing that a mobile app…

Harden a mobile app's network transport so an adversary-in-the-middle on a hostile network cannot read or tamper with its traffic.

Generates Playwright tests that detect iOS/mobile UX anti-patterns in CI.

Use when packaging a MobiSys artifact for the Artifact Evaluation Committee — choosing among the three independent ACM badges (Available…

Use when drafting a MobiSys rebuttal after round-2 reviews — working within the scope limit (correct factual errors, answer specific…

Use when preparing an accepted MobiSys paper for the ACM Digital Library camera-ready — de-anonymization, the ACM double-column final…

Use when designing or auditing the evaluation of a MobiSys submission — building real-device testbeds, instrumenting energy and thermal…

Use when strengthening MobiSys reproducibility evidence — capturing device, SoC, OS build, framework and model versions, power-instrument…