This skill should be used when the user asks to "assess the mobile app", "audit app health", "review app dependencies", "check app store compliance", or "measure app performance". Also triggers on mentions of crash rate, ANR, app size, cold start time, or mobile tech debt. Use this skill even if the user only asks about a single metric like crash rate — the full health assessment context ensures no blind spots. [EXPLICIT]
From jm-adknpx claudepluginhub javimontano/jm-adk-alfaThis skill is limited to using the following tools:
agents/guardian.mdagents/lead.mdagents/specialist.mdagents/support.mdevals/evals.jsonknowledge/body-of-knowledge.mdknowledge/knowledge-graph.mdprompts/meta.mdprompts/primary.mdprompts/variations/deep.mdprompts/variations/quick.mdreferences/mobile-assessment-benchmarks.mdtemplates/output.docx.mdtemplates/output.htmlMobile assessment evaluates an existing mobile application across six dimensions: runtime health, dependency security, platform compliance, code quality, user experience metrics, and remediation planning. This skill produces a comprehensive AS-IS assessment that identifies risks, quantifies technical debt, and prioritizes fixes. [EXPLICIT]
Una app sin métricas de vitales es una app volando a ciegas. Crash-free rate, ANR rate, cold start, y app size no son "nice-to-have" — son los signos vitales que determinan si la app sobrevive en los stores. Store compliance es non-negotiable: un rechazo de App Store puede costar semanas de revenue.
The user provides an app name as $ARGUMENTS. Parse $1 as the app name used throughout all output artifacts. [EXPLICIT]
Parameters:
{MODO}: piloto-auto (default) | desatendido | supervisado | paso-a-paso
{FORMATO}: markdown (default) | html | dual{VARIANTE}: ejecutiva (~40% — S1 health profile + S3 compliance + S6 remediation) | técnica (full 6 sections, default)Before generating assessment, detect the mobile project context:
!find . -name "pubspec.yaml" -o -name "package.json" -o -name "*.xcodeproj" -type d -o -name "build.gradle*" -o -name "Podfile" -o -name "*.swift" -o -name "*.kt" | head -20
If reference materials exist, load them:
Read ${CLAUDE_SKILL_DIR}/references/mobile-assessment-benchmarks.md
Google Play Vitals Thresholds (enforced, affect store visibility):
| Metric | Bad Behavior Threshold | Per-Device Threshold | Consequence |
|---|---|---|---|
| User-perceived crash rate | >1.09% of daily sessions | >8% on single device model | Reduced discoverability, store warning |
| User-perceived ANR rate | >0.47% of daily active users | >8% on single device model | Reduced discoverability, store warning |
| Excessive wakeups | >10 wakeups/hour | N/A | Battery vitals warning |
| Stuck partial wake locks | >0.30% of sessions (enforced Mar 2026) | N/A | Store visibility impact |
| Excessive cold starts | >5s | N/A | Vitals flag (aim far lower) |
Crash Rate Benchmarks:
| Rating | Crash-Free Sessions | Action |
|---|---|---|
| Excellent (top 10%) | >99.99% | Monitor only |
| Good (industry median) | >99.95% | Maintain |
| Acceptable | >99.5% | Investigate top crashes |
| Poor | 99.0-99.5% | Prioritize crash fixes |
| Critical | <99.0% | Emergency: app stability at risk |
ANR / Hang Rate:
MXHangDiagnostic for reporting.Cold Start Benchmarks:
| Rating | Time | Action |
|---|---|---|
| Excellent | <1s | No action |
| Good | 1-2s | Monitor |
| Acceptable | 2-3s | Optimize next sprint |
| Unacceptable | >3s | Critical priority |
| Google Play flag | >5s | Vitals warning |
reportFullyDrawn() (Android), os_signpost / MetricKit (iOS).App Size Budget:
| Category | Target | Warning | Critical |
|---|---|---|---|
| Initial download (APK/IPA) | <30MB | 30-80MB | >80MB |
| With on-demand resources | <150MB | 150-300MB | >300MB |
| Emerging market target | <15MB | 15-25MB | >25MB |
| App Clip / Instant App | <15MB (hard limit) | N/A | N/A |
Memory Footprint:
Tools: Firebase Crashlytics, Sentry, Embrace (mobile-focused with session replay), Bugsnag.
Dependency Inventory:
CVE Analysis:
./gradlew dependencyCheckAnalyzeLicense Compliance:
SDK Bloat Assessment:
Apple App Store Compliance:
iOS Privacy Manifest (PrivacyInfo.xcprivacy) -- MANDATORY:
Every app and third-party SDK must include PrivacyInfo.xcprivacy declaring:
| Element | Description | Enforcement |
|---|---|---|
| Required Reason APIs | UserDefaults, file timestamp, disk space, boot time, system uptime | Must declare reason code per API; rejection if missing (since May 2024) |
| Data collection types | Categories of data collected (name, email, location, etc.) | Must match privacy nutrition labels |
| Tracking domains | Domains contacted for tracking purposes | Must be declared; ATT required before contacting |
| SDK code signature | Third-party SDKs on Apple's "commonly used" list | Must include manifest AND signature (since Feb 2025) |
Audit checklist:
PrivacyInfo.xcprivacy exists in app bundle and every third-party frameworkGoogle Play Compliance:
Accessibility (WCAG Mobile):
Tech Debt Inventory:
Test Coverage:
Flashlight (formerly Lighthouse for Mobile) -- Android CI Performance:
Modularity Score:
Build Health:
Load Time Metrics:
Interaction Latency:
Offline Behavior: Graceful degradation, cached content available, queued actions sync when online, clear network status indication.
Deep Link Coverage: Universal Links / App Links configured, all shareable content has deep links, full navigation context restored, deferred deep links for new installs.
Push Notification Health: Token registration rate, delivery rate, open rate, opt-in rate, silent push reliability.
Finding Severity Classification:
| Severity | Definition | SLA |
|---|---|---|
| Critical | App rejection risk, security CVE (CVSS 9+), crash >1%, Play vitals threshold exceeded | Fix immediately |
| High | Performance degradation, compliance gap, ANR near threshold, missing privacy manifest | Fix within 1 sprint |
| Medium | Tech debt, minor compliance, suboptimal patterns | Plan within quarter |
| Low | Nice-to-have, optimization, cosmetic | Backlog |
Quick Wins (1-3 days each):
Strategic Fixes (1-4 weeks each):
Migration Paths (1-3 months each):
Prioritization Formula:
(Impact * Risk) / EffortProgress Tracking: Quarterly full assessment, monthly spot-checks. Track: severity distribution trend, crash-free rate, ANR rate, app store rating, app size.
| Decision | Enables | Constrains | When to Use |
|---|---|---|---|
| Fix Critical First | Prevents rejection, secures users | Delays feature work | Always the right priority |
| Modularize Before Features | Faster future development | Upfront investment | High tech debt, slow builds |
| Increase Test Coverage | Confidence, fewer regressions | Slower initial development | Before major refactors |
| SDK Consolidation | Smaller app, fewer conflicts | Migration effort | Multiple overlapping SDKs |
| Accessibility Retrofit | Larger user base, compliance | Significant effort | Regulatory requirement, ethical priority |
| Flashlight CI Integration | Automated perf regression detection | CI time increase (~2-5 min) | Any app with >10K users |
No Analytics/Crash Reporting: Install Crashlytics + basic analytics as prerequisite. Establish baseline from assessment date. Manual testing substitutes for production metrics.
Legacy App with No Tests: Start with critical path characterization tests only. Capture current behavior before refactoring.
Emerging Markets: App size <15MB ideal. Benchmark on low-end devices (2GB RAM). Network: 3G, high latency.
Multiple Release Tracks: Assess each variant independently. Feature flags may hide issues across tracks.
White-Label / Multi-Tenant: Assess each tenant config independently. Compliance varies by jurisdiction.
Before finalizing delivery, verify:
| Format | Default | Description |
|---|---|---|
markdown | Yes | Rich Markdown + Mermaid diagrams. Token-efficient. |
html | On demand | Branded HTML (Design System). Visual impact. |
dual | On demand | Both formats. |
Default output is Markdown with embedded Mermaid diagrams. HTML generation requires explicit {FORMATO}=html parameter. [EXPLICIT]
Primary: A-01_Mobile_Assessment.html -- Executive summary, health dashboard (with benchmark tables), dependency audit, compliance checklist, code quality metrics, UX performance data, prioritized remediation roadmap.
Secondary: CVE report, accessibility audit spreadsheet, performance profiling captures, build time analysis, dependency license inventory, PrivacyInfo.xcprivacy audit report.
Author: Javier Montaño | Last updated: 2026-03-12
Searches, retrieves, and installs Agent Skills from prompts.chat registry using MCP tools like search_skills and get_skill. Activates for finding skills, browsing catalogs, or extending Claude.