insecure-local-storage
Detects sensitive data written to unprotected local files, preference stores, or SQLite. Use when writing code that stores sensitive data (credentials, tokens, PII) to local files, platform preference stores (NSUserDefaults, SharedPreferences, UserDefaults), SQLite databases, or localStorage without encryption at rest.
Install
With your agent
Install OMGSkills skill "thejefflarson/soundcheck:.claude/skills/insecure-local-storage" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/insecure-local-storage ~/.claude/skills/insecure-local-storageFrom README
Insecure Local Data Storage (A02:2025) What this checks Detects sensitive data written to unprotected local storage. Cleartext storage lets any process with file-system access, or a device backup restore, harvest credentials and tokens without authentication. Vulnerable patterns Credentials or tokens written to a plain file (JSON, INI, dotfile) without encryption Sensitive values written to an unencrypted platform preference store such as Android SharedPreferences, iOS UserDefaults, or Windows registry Long-lived auth token placed in browser localStorage or sessionStorage where any script on the origin can read it SQLite or other embedded database storing credentials with no at-rest encryption Temp files containing secrets written to a world-readable directory with default permissions and not deleted on completion Fix immediately Flag the vulnerable code and explain the risk.
More from this repo
authentication-failures
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
broken-access-control
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
concurrency-correctness
Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...