How do I install the Security Reactnative skill?

Run npx skillmds@latest add thebeardedbearsas/security-reactnative in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Security Reactnative skill do?

Security - React Native 0.85+ Best Practices. Use when reviewing security, implementing auth, or hardening code. It is listed under Web & Frontend on SkillMD.

Is Security Reactnative safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Security Reactnative?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Security Reactnative free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Security Reactnative?

TheBeardedBearSAS (@thebeardedbearsas) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Security Reactnative by thebeardedbearsas

Name: Security Reactnative
Rating: 4.2 (5 reviews)
Author: TheBeardedBearSAS

File contents

Security - React Native 0.85+ Best Practices

Ce skill fournit les bonnes pratiques de sécurité pour React Native 0.85+ avec la New Architecture.

Principes clés

Sécurité native : Keychain (iOS) / Keystore (Android) pour les secrets sensibles (pas AsyncStorage)
HTTPS uniquement : ATS (iOS) et Network Security Config (Android) strictes
JSI synchrone : validation côté natif des appels TurboModules
Expo SecureStore : abstraction sécurisée cross-platform pour les tokens

Spécificités React Native 0.85+

TurboModules sécurisés : validation des inputs côté natif avant traitement JSI
Bridge legacy supprimé : pas de risques de sérialisation JSON vulnérable
Fabric : rendu natif isolé du thread JS (limite les injections UI)
Hermes obligatoire : bytecode natif (protection contre le reverse engineering du bundle JS)

Anti-patterns critiques

❌ Stocker des tokens dans AsyncStorage (plaintext)
❌ HTTP non sécurisé en production
❌ Code PIN/biométrie sans SecureStore
❌ Deep links non validés (injection de navigation)
❌ WebView sans validation de l'origine

Sources : OWASP Mobile Top 10, RN Security Best Practices

Frequently asked questions

Security Reactnative