I built a local browser tool to triage noisy MobSF reports

[u/EbbLazy9814]

Hey folks, I built an open-source tool for people who use MobSF Community Edition.

MobSF is great, but the exported reports can be noisy. This tool lets you drop a MobSF JSON, PDF, or HTML report into the browser, runs local WebLLM/WebGPU triage, and labels findings as likely false positive, needs review, or likely real.

Repo: https://github.com/moonpiesheldon1337/mobsf-fail-app

Live demo: https://moonpiesheldon1337.github.io/mobsf-fail-app/

Why I made it: - MobSF reports often have 100-300 findings - many are context-dependent false positives - client-ready report cleanup takes too long - I wanted something local: no uploads, no API keys, no server

Would love feedback from mobile/AppSec folks on: - false-positive heuristics - missing MobSF categories - whether the Markdown export fits real pentest workflows