Skip to main content
affpapa.org
RU EN
plugin CX Codex

frontend-mobile-security — Claude Code plugin: frontend and mobile

A Claude plugin that covers XSS prevention, CSRF protection, Content Security Policy setup, and secure storage patterns for mobile apps.

Install into Claude Code · Plugin marketplace All methods and platforms ↓ 
/plugin marketplace add wshobson/agents
/plugin install frontend-mobile-security@claude-code-workflows
Open on GitHub

What frontend-mobile-security does

The plugin feeds Claude with security context for web frontends and mobile apps. It covers XSS, CSRF, Content Security Policy, and patterns for storing data safely. Author is Seth Hobson, repo is wshobson/agents, MIT license.

Install goes through the Claude plugin marketplace. You add the wshobson/agents source first, then pull the plugin from the claude-code-workflows set. No API keys or extra dependencies needed to install.

The plugin gives the agent background on common vulnerabilities, but it does not replace a SAST scanner or a pentest. If your project already enforces a strict CSP, the suggestions may clash with your existing policy — worth checking against your current headers before applying anything.

What it helps with

  • spot XSS holes in templates and JS code
  • set up a Content Security Policy without breaking third-party scripts
  • close CSRF gaps in forms and API calls
  • pick a safe way to store tokens in a mobile app
  • audit how the frontend handles user-supplied data

Example prompts for the agent

  • check this React component for XSS
  • help me set up a CSP for our app
  • how should I store the auth token in a mobile app

How to install frontend-mobile-security

Plugin marketplace

/plugin marketplace add wshobson/agents
/plugin install frontend-mobile-security@claude-code-workflows

Step by step, with commands for each platform: Claude Code plugins: marketplaces, installing, and building your own

From the same set342

The whole set →
seo-analysis-monitoring An SEO plugin that checks content freshness, spots keyword cannibalization and helps build authority. CX Codex ★ 41,729repo stars seo-content-creation Plan, write, and audit SEO content with E-E-A-T in mind. Use the plugin when you need support across these content tasks. CX Codex ★ 41,729repo stars api-testing-observability A plugin that handles the boring parts around APIs: automated tests, request mocks, OpenAPI docs and observability setup. CX Codex ★ 41,729repo stars api-scaffolding Assists with framework selection, backend architecture design, and REST or GraphQL API generation. CX Codex ★ 41,729repo stars security-compliance Check projects against SOC2, HIPAA, and GDPR, scan for secrets, and work with compliance checklists and regulatory documentation. CX Codex ★ 41,729repo stars security-scanning A Claude plugin that checks your code for vulnerabilities: SAST, dependency scanning, container checks and OWASP Top 10 compliance. CX Codex ★ 41,729repo stars database-migrations Automates database migrations, sets up observability, and assists with cross-database schema migration strategies. CX Codex ★ 41,729repo stars database-design This plugin covers database architecture, schema design, and SQL optimization for production systems. Use it when an agent needs to shape or review database work. CX Codex ★ 41,729repo stars

Similar

dangling-markup-injection yaklang A playbook for dangling markup injection: when HTML injection works but JavaScript is blocked, it shows how to pull CSRF tokens and page data through unclosed tags. CX Codex +1 3,600installs laravel-security affaan-m This skill reviews Laravel authentication, Eloquent safety, CSRF, XSS, APIs, and production settings. Use it for security reviews or deployment checks. CX Codex +1 5,400installs wordpress-security-validation bobmatnyc A skill for safe WordPress plugin and theme development: sanitize input, validate logic, escape output. Useful when handling forms, AJAX, or rendering untrusted content. CX Codex +1 581installs imagegen-frontend-mobile nexu-io Generates premium mobile screen images and flows for iOS, Android, and cross-platform with clean hierarchy, readable text, and controlled palettes. CX Codex +1 1,700installs xss-cross-site-scripting yaklang A skill that feeds your coding agent non-obvious XSS vectors: context-specific payloads, WAF and CSP bypass. CX Codex +1 3,900installs VibeSec-Skill BehiSecc A coding-agent skill that pushes the model toward secure web development and runs a security audit when you ask for one. CX Codex +1 1,100installs

Nearby in Security

All plugins for Security →

Questions about frontend-mobile-security

How do I install frontend-mobile-security in Claude?

Through the plugin marketplace: run /plugin marketplace add wshobson/agents, then /plugin install frontend-mobile-security@claude-code-workflows.

What does frontend-mobile-security do?

It adds Claude context on XSS, CSRF, Content Security Policy, and secure storage patterns for mobile apps, so the agent accounts for them when writing and reviewing code.

Does the plugin need extra tooling to work?

Not to install — it comes through the Claude marketplace. It does not replace a vulnerability scanner, so results are worth verifying separately.

Source text

frontend-mobile-security · MIT 
XSS prevention, CSRF protection, content security policies, mobile app security, and secure storage patterns

© Seth Hobson · MIT · wshobson/agents

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor