Evidence at a glance
Based on the linked sources. The author's reported result and independent confirmation are separate checks.
- AI involvement
- Reported models: Claude, copilot-swe-agent. Tools: Markdown Linter, URL Checker. The writeup below describes the work attributed to AI.
- Reported result
- Works. This is the directory's source-based outcome classification.
- Independent confirmation
- Not reported.
- Human work and limitations
- The project commit logs contain co-author entries for various AI agents and models. These entries are attributed to specific commits involving documentation updates, link maintenance, and test case refinements. The project documentation and testing guides are actively maintained by the community.
Original sources
What was done
The OWASP MASTG is a manual for mobile app security testing and reverse engineering, providing technical processes to verify MASWE weaknesses and MASVS controls. Recent project maintenance includes documentation updates, link management, and test clarifications.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual designed for mobile application security testing and reverse engineering. It provides technical processes to verify weaknesses defined in the OWASP Mobile Security Weakness Enumeration (MASWE), which align with controls in the OWASP Mobile Application Verification Standard (MASVS). The project maintains a repository of test cases, knowledge files, and demonstration materials. Recent activity in the project repository, as documented in commit logs, includes the correction of tool references, the management of broken links, and the clarification of test requirements for components such as WKWebView. Commit metadata explicitly credits various entities as co-authors, including "copilot-swe-agent[bot]", "Claude Sonnet 5", "Claude Opus 5", and "Claude Fable 5.1". These co-author entries are associated with tasks such as documentation maintenance, link management, and minor code or test corrections. The project utilizes automated workflows, such as a URL checker, which occasionally encounters bot-protection interstitials or connection drops from external domains.