creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-08-06 19:00:17 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter

Browse Source 
Added structured security framework mappings to SKILL.md frontmatter across all applicable skills:
- atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques)
- d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs)
- nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions)

Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
This commit is contained in:
mukul975
2026-04-06 01:56:17 +02:00
parent c15f73db46
commit ef27f026cb
209 changed files with 3959 additions and 3379 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/exploiting-insecure-data-storage-in-mobile/SKILL.md
+22 -8
View File
@@ -1,18 +1,32 @@
---
name: exploiting-insecure-data-storage-in-mobile
description: >
Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile
applications including unencrypted databases, world-readable files, insecure SharedPreferences,
plaintext credential storage, and improper keychain/keystore usage. Use when performing mobile
penetration testing focused on OWASP M9 (Insecure Data Storage) or assessing compliance with
MASVS-STORAGE requirements. Activates for requests involving mobile data storage security,
local storage exploitation, SharedPreferences analysis, or mobile data leakage assessment.
description: 'Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including
unencrypted databases, world-readable files, insecure SharedPreferences, plaintext credential storage, and improper keychain/keystore
usage. Use when performing mobile penetration testing focused on OWASP M9 (Insecure Data Storage) or assessing compliance
with MASVS-STORAGE requirements. Activates for requests involving mobile data storage security, local storage exploitation,
SharedPreferences analysis, or mobile data leakage assessment.
'
domain: cybersecurity
subdomain: mobile-security
author: mahipal
tags: [mobile-security, android, ios, data-storage, owasp-mobile, penetration-testing]
tags:
- mobile-security
- android
- ios
- data-storage
- owasp-mobile
- penetration-testing
version: 1.0.0
license: Apache-2.0
atlas_techniques:
- AML.T0057
nist_ai_rmf:
- MEASURE-2.7
- MAP-5.1
- MANAGE-2.4
- GOVERN-1.1
- GOVERN-4.2
---
# Exploiting Insecure Data Storage in Mobile