Dagfinn - Mobile Application Security Engineer AI Skill
Digital edition one .md filedagfinn-mobile-application-security-engineer.skill
You don't read it. Your AI does.
Open it in Claude, ChatGPT or Gemini - your AI reads it and becomes a specialist in this field.
Instant download · 30-day money-back guarantee. Pay once, keep forever - no subscription. Written and tested by us, never scraped from GitHub. Refund policy
Questions before you buy?
Write to us and a person answers - usually the same day. Not a bot, not a ticket queue.
hello@kissmyskills.comYou don't read it. Your AI does.
Hand the file to Claude, ChatGPT or Gemini once. It reads it, becomes a specialist in this field, and answers as Dagfinn from the very next message.
One purchase. No subscription. The file is yours to keep and re-use forever.
// inside this edition
What's inside this edition
- MASVS and MASTG assessment of iOS and Android builds
- Keychain, keystore and biometric binding done correctly
- Deep links, exported components and WebView hardening
- SDK supply chain, anti-tamper trade-offs and secure release
Mobile teams shipping a regulated or high-value app who need a real security assessment rather than a store checklist.
A mobile application security engineer bills $145+/hr, this is one file, yours forever.
What you're actually buying
Drop Dagfinn into Claude and get a mobile security engineer who will tell you plainly that your app can be decompiled, then harden what actually matters.
Dagfinn secures iOS and Android applications end to end against MASVS and MASTG: static and dynamic analysis of mobile binaries, authorized reverse engineering of an APK or IPA with jadx, Frida, objection and Hopper and hardening against exactly those techniques, insecure local storage, keychain and keystore usage, biometric authentication bound to a cryptographic operation rather than a UI gate, certificate pinning and transport security with realistic bypass expectations, deep link and intent handling, exported components, WebView hardening and JavaScript bridges, third-party SDK and mobile supply chain risk, runtime protection, root and jailbreak detection and its genuinely limited value, obfuscation and anti-tamper trade-offs, mobile API abuse and client-side secrets that must not exist, permission hygiene and store privacy requirements, and secure release and code signing.
What you get
- →MASVS and MASTG assessment of iOS and Android builds
- →Keychain, keystore and biometric binding done correctly
- →Deep links, exported components and WebView hardening
- →SDK supply chain, anti-tamper trade-offs and secure release
How to install
Download the .skill package, open Claude, paste SKILL.md into your Project Instructions or system prompt, describe your requirement, and Dagfinn builds the answer. Includes a full worked example so you see exactly what you get.
# Dagfinn - Mobile Application Security Engineer You are Dagfinn, a senior mobile application security engineer. You assess against MASVS and MASTG, and you are honest about what client-side hardening can and cannot achieve. ## How you work 1. Confirm authorization, then analyse the build the way an attacker would 2. Check storage, keystore and biometric binding before anything cosmetic 3. Test transport, pinning, deep links, exported components and WebViews 4. Find client-side secrets and SDK risk; treat the client as untrusted 5. Rank findings by real exploitability and sequence them per release Authorized assessment only, on builds you own or are contracted to test. Confirm current platform behaviour before relying on it.
Excerpt from the actual file you'll download.
Ask it something. Here's what comes back.
Four steps. Any AI chat.
- 01Download the file
After checkout, the download link lands in your inbox. Save the file anywhere on your device.
- 02Open your AI chat
Claude, ChatGPT, Gemini, Grok, or Copilot - whichever one you already use.
- 03Paste the file contents
Drop it into the system prompt, Project instructions, or custom instructions field.
- 04Start working
Your AI is now configured as a specialist. Ask it anything inside its domain.
No technical knowledge required. No subscription. Pay once, keep forever.
Works with every major AI chat.
Drop the file into your AI's system prompt, Project instructions, or custom instructions. No setup. No code. No vendor lock-in.
Questions about this product
What does the Dagfinn skill do?+
Harden your mobile app where it counts: storage, keys, biometrics, transport, components and the client-side secrets that should not be there. Load it once into Claude Projects and you get a configured Mobile Application Security Engineer without re-explaining context at the start of every session. This skill is for authorized, defensive security work only. Validate findings in your own environment, follow your rules of engagement and written authorization, and confirm current framework, vendor, and regulatory specifics before you act on them.
How do I install this skill file?+
Download the .skill package (it contains SKILL.md), paste the contents into Claude Projects Instructions or your AI's system prompt, add your own context and start your first session. Works with Claude, ChatGPT, or any AI chat that accepts system prompts.
Which AI tools does this skill work with?+
Works with Claude (recommended), ChatGPT, Gemini, Perplexity and Copilot, and any AI chat that accepts system prompts. Claude Projects gives the best results.
What is included in this download?+
One .skill package delivered instantly after purchase: the full SKILL.md role configuration plus a worked-example file with a real scenario so you see the quality before you rely on it. No subscription, yours permanently.
How is this different from using Claude without the Dagfinn skill?+
Without a skill file your AI starts every session as a general assistant. With Dagfinn loaded it applies Mobile Application Security Engineer methodology from the first message, with consistent quality every time. This skill is for authorized, defensive security work only. Validate findings in your own environment, follow your rules of engagement and written authorization, and confirm current framework, vendor, and regulatory specifics before you act on them.
Do I have to read it myself?+
No. The file is written for your AI to read, not for you. Upload it or paste it in once and the AI takes on the role. After that you just ask it questions the way you normally would. You're welcome to open it and read it, but nothing here depends on you doing that.
Is this a physical book?+
No, it's digital. You download it the moment the order goes through and it's yours permanently. The cover is styled like a book because each edition is written and edited as one self-contained piece of work. The reading part is your AI's job, not yours.
Ready to specialise your AI?
One drop-in file. Pay once, keep forever - works with Claude & ChatGPT.
More from this shelf
Brunhilde - Head of Security Engineering AI Skill
Brunhilde - Head of Security Engineering AI Skill
Hallvard - Cyber Crisis Management & Exercise Lead AI Skill
Hallvard - Cyber Crisis Management & Exercise Lead AI Skill
Verena - Cyber Risk Quantification & Insurance Analyst AI Skill
Verena - Cyber Risk Quantification & Insurance Analyst AI Skill
Serafim - Ransomware Resilience & Backup Security Engineer AI Skill
Serafim - Ransomware Resilience & Backup Security Engineer AI Skill