Agent skill

React Native Security

by HoangNguyen0403 in HoangNguyen0403/agent-skills-standard

Secure storage, network traffic, and deep links in React Native mobile apps.

MITAuto-check: notesMobile

Install React Native Security

skills CLI
$ npx skills add HoangNguyen0403/agent-skills-standard --skill react-native-security -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install HoangNguyen0403/agent-skills-standard react-native-security --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/react-native/react-native-security .claude/skills/react-native-security && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
react-native-security
GitHub stars
571
Token cost
~624 tokens
SKILL.md length
236 words
Files
3 (incl. references)
Skills in repo
211
Repo updated
First seen
Licence
MIT

At a glance

Secure storage, network traffic, and deep links in React Native mobile apps.

  • Implementing secure storage
  • SKILL.md covers Priority: P0 (CRITICAL), Store Credentials Securely, Validate Deep Links and Enforce Network Security, plus 4 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Certificate pinning

What it does

React Native Security is an agent skill from HoangNguyen0403/agent-skills-standard. Secure storage, network traffic, and deep links in React Native mobile apps. Use when implementing secure storage, certificate pinning, or deep link validation in React Native.

Its SKILL.md is about 620 tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files, including reference files (for example `evals/evals.json` and `references/secure-storage.md`).

It sits in Mobile, covering Cross-platform mobile apps. It works with React Native. The repository describes itself as: A collection of Agent Skills Standard and Best Practice for Programming Languages, Frameworks that help our AI Agent follow best practies on frameworks and programming laguages. The licence is MIT.

When your agent uses it

  • Implementing secure storage
  • Certificate pinning
  • Deep link validation in React Native

Example prompts

  • “/react-native-security”

What it can do on your machine

Read from SKILL.md and the folder at commit 266fd75. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

React Native Security loads about 624 tokens when it runs, and up to ~2.3k if it reads all its reference files. Until then it costs about 50 tokens; SKILL.md has 236 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~50
When it runs · the whole SKILL.md, loaded when a task matches
~624
With references · SKILL.md plus every file in references/, read only if the agent opens them
~2.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteMentions a .env fileSKILL.md:39
    - **No Secrets in Code**: Use `.env` files with `react-native-config`. Add to `.gitignore`.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from HoangNguyen0403/agent-skills-standard at commit 266fd75, republished under its MIT licence (© HoangNguyen0403). 236 words, ~624 tokens.

Download SKILL.mdSave it as .claude/skills/react-native-security/SKILL.md (or your agent's skills folder). This skill also uses 2 other files; get the full folder from GitHub.
name
react-native-security
description
Secure storage, network traffic, and deep links in React Native mobile apps. Use when implementing secure storage, certificate pinning, or deep link validation in React Native.

React Native Security

Priority: P0 (CRITICAL)

Store Credentials Securely

  • Secure Storage: Use react-native-key-chain for tokens, passwords.
  • Never AsyncStorage: Not encrypted. Only for non-sensitive data.
  • Biometric Auth: Use react-native-biometrics for Face ID/Touch ID.

See secure storage reference for secure storage with biometric access control.

  • Validate URLs: Check scheme and host before navigation.
  • Sanitize Params: Never trust URL params. Validate and sanitize.
  • Token Extraction: Avoid passing tokens in deep link URLs. Use secure code exchange.

See secure storage reference for deep link URL validation with scheme and host whitelisting.

Enforce Network Security

  • HTTPS Only: Enforce via NSAppTransportSecurity (iOS) and network_security_config.xml (Android).
  • Certificate Pinning: Use react-native-ssl-pinning for high-security apps (banking, healthcare). Warning: Requires app update when certificates rotate.
  • No Secrets in Code: Use .env files with react-native-config. Add to .gitignore.
  • Verify: Test by attempting plain HTTP requests in dev; confirm they rejected.

Protect Sensitive Data

  • PII Masking: Mask email/phone in logs and analytics.
  • Clipboard: Clear sensitive data after paste.
  • Screenshots: Block on sensitive screens with react-native-screen-guard.
  • Hermes: Bytecode harder to reverse-engineer. ProGuard/R8: Enable on Android.

Anti-Patterns

  • No Hardcoded Secrets: Use environment variables.
  • No Sensitive Logs: Strip console.log in production.
  • No Plain HTTP: Always use HTTPS.
  • No Client-Side Auth: Validate on backend.

References

See references/secure-storage.md for secure storage, Biometrics, SSL Pinning, and PII Masking.

Pinning verification checklist

  • Test that a request fails with an untrusted or changed certificate, and document rotation and recovery before shipping certificate pins.

© HoangNguyen0403, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 2 other files (references) in skills/react-native/react-native-security of HoangNguyen0403/agent-skills-standard.

  • SKILL.md
  • evals/evals.json
  • references/secure-storage.md

Open the folder on GitHubat commit 266fd75

Compare with similar skills

React Native Security next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

React Native Security compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
React Native Security this skillHoangNguyen0403/agent-skills-standard571—~624Automated safety check: NotesMIT
React Native Best Practicesvercel-labs/openreview1.7k17 repos~1.1kAutomated safety check: PassMIT
Creating Reanimated Animationsgluestack/gluestack-ui5.3k—~2.4kAutomated safety check: PassNone
RtlGetStream/stream-chat-react-native1.2k—~4.4kAutomated safety check: PassCustom licence
Mobile App UI Designceorkm/mobile-app-ui-design403—~2kAutomated safety check: PassNone
Sleek Design Mobile Appssleekdotdesign/agent-skills585—~2.1kAutomated safety check: PassMIT

Similar skills

  • React Native Best Practices

    vercel-labs/openreview

    Official

    A prioritized rule set for React Native and Expo apps covering list performance, animation, navigation, UI patterns, state, rendering, monorepos and configuration.

    1.7k GitHub starsUsed in 17 repos~1.1k tokens
    MobileAuto-check passed
  • Creating Reanimated Animations

    gluestack/gluestack-ui

    Generate React Native Reanimated animation code for React Native apps.

    5.3k GitHub stars~2.4k tokensUpdated 1 mo ago
    MobileAuto-check passed
  • Rtl

    GetStream/stream-chat-react-native

    Audit and maintain RTL (right-to-left) layout compatibility in stream-chat-react-native.

    1.2k GitHub stars~4.4k tokensUpdated yesterday
    MobileAuto-check passed
  • Mobile App UI Design

    ceorkm/mobile-app-ui-design

    Design high-quality mobile app UI/UX screens, flows, and components.

    403 GitHub stars~2k tokensUpdated 3 mo ago
    MobileAuto-check passed
  • Sleek Design Mobile Apps

    sleekdotdesign/agent-skills

    Design mobile app screens with Sleek, edit Sleek projects, and implement their designs in React Native or HTML.

    585 GitHub stars~2.1k tokensUpdated 4 days ago
    MobileAuto-check passed
  • Argent Metro Debugger

    bbplayer-app/BBPlayer

    Debug a JS runtime via CDP using argent debugger tools. An agent skill from bbplayer-app/BBPlayer.

    1.2k GitHub stars~3.4k tokensUpdated 2 days ago
    MobileAuto-check passed

More from HoangNguyen0403/agent-skills-standard

All 211 skills in this repo
  • Subagent-Driven Development

    HoangNguyen0403/agent-skills-standard

    Runs a multi-task implementation plan by sending each task to a fresh implementer subagent, reviewing it independently, then reviewing the whole branch.

    571 GitHub stars~1.3k tokensUpdated yesterday
    Auto-check passed
  • draw.io Architecture Diagramming

    HoangNguyen0403/agent-skills-standard

    Draws architecture diagrams as editable draw.io files from a JSON spec, with a fixed house style, one C4 level per diagram and evidence-tagged shapes.

    571 GitHub stars~1.3k tokensUpdated yesterday
    Auto-check passed
  • Android Navigation 3 Guide

    HoangNguyen0403/agent-skills-standard

    Implements and migrates to Jetpack Navigation 3 in Compose: NavDisplay, typed route objects, a state-list back stack, deep links, multiple back stacks and dialog scenes.

    571 GitHub stars~687 tokensUpdated yesterday
    Auto-check passed
  • Angular HttpClient Standards

    HoangNguyen0403/agent-skills-standard

    Sets rules for Angular HTTP code: functional interceptors, typed requests, services that own every call, and httpResource for reactive data loading in Angular 17+.

    571 GitHub stars~652 tokensUpdated yesterday
    Auto-check passed
  • Angular Tooling

    HoangNguyen0403/agent-skills-standard

    Angular CLI usage, code generation, build configuration, and bundle optimization.

    571 GitHub stars~743 tokensUpdated yesterday
    Auto-check passed
  • Common Code Review

    HoangNguyen0403/agent-skills-standard

    Conduct high-quality, persona-driven code reviews. An agent skill from HoangNguyen0403/agent-skills-standard.

    571 GitHub stars~772 tokensUpdated yesterday
    Auto-check passed

Works with

Categories

Questions about React Native Security

What does React Native Security do?

Secure storage, network traffic, and deep links in React Native mobile apps. React Native Security is an agent skill from HoangNguyen0403/agent-skills-standard. Secure storage, network traffic, and deep links in React Native mobile apps.

When should I use React Native Security?

React Native Security fits situations like: implementing secure storage; certificate pinning; deep link validation in React Native.

How do I install React Native Security in Claude Code?

Run `npx skills add HoangNguyen0403/agent-skills-standard --skill react-native-security -a claude-code`. Or copy the skill folder (skills/react-native/react-native-security in HoangNguyen0403/agent-skills-standard) into .claude/skills/react-native-security in your project. Claude Code loads it when a task matches its description.

How do I install React Native Security in Codex?

Run `npx skills add HoangNguyen0403/agent-skills-standard --skill react-native-security -a codex`. Or copy the skill folder (skills/react-native/react-native-security in HoangNguyen0403/agent-skills-standard) into .agents/skills/react-native-security in your project. Codex loads it when a task matches its description.

Can I use React Native Security in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add HoangNguyen0403/agent-skills-standard --skill react-native-security -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/react-native-security, .gemini/skills/react-native-security, .github/skills/react-native-security and .opencode/skills/react-native-security in your project.

What does React Native Security need to run?

SKILL.md names no scripts, command-line tools or credentials: React Native Security is instructions for the agent only.

Does React Native Security access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is React Native Security safe to install?

Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does React Native Security use?

React Native Security is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does React Native Security use?

About 624 tokens (SKILL.md is roughly 2.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.6k tokens, read only when the agent opens those files.

What are the alternatives to React Native Security?

Skills that share tags, products or a category with React Native Security: React Native Best Practices (vercel-labs/openreview, 1.7k stars), Creating Reanimated Animations (gluestack/gluestack-ui, 5.3k stars), Rtl (GetStream/stream-chat-react-native, 1.2k stars) and Mobile App UI Design (ceorkm/mobile-app-ui-design, 403 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains React Native Security?

HoangNguyen0403 (a GitHub user) maintains it in HoangNguyen0403/agent-skills-standard, which has 571 GitHub stars. The repository holds 211 skills in this directory. The repository was last updated on October 9, 2026.

Source: HoangNguyen0403/agent-skills-standard on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.