skills.rest
dimitriRemoiville
dimitriRemoivilleCOMMUNITY
Explore all skills by this author →
GitHub

android-security

Enforce keystore-backed keys, encrypted storage, and network security in Android apps.

1|Updated Apr 24, 2026
Search Tags:#biometrics#network-security#keystore#android-security#certificate-pinning#play-integrity
One-click install
npx skills add https://github.com/dimitriRemoiville/cc-mobile --skill android-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: android-security
Source: https://github.com/dimitriRemoiville/cc-mobile/tree/main/plugins/cc-mobile-android/skills/android-security
Command: npx skills add https://github.com/dimitriRemoiville/cc-mobile --skill android-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Android security patterns — Android Keystore, EncryptedSharedPreferences / Tink, network security config, OkHttp cert pinning, Play Integrity, biometric gating. Load whenever adding auth, secrets, or network calls that cross a trust boundary.

Core Features & Use Cases

  • Implement Keystore-backed keys and key management to protect secrets at rest.
  • Apply network hardening with a strict network security config and certificate pinning.
  • Gate sensitive flows with biometrics or device credentials to prevent unauthorized access.

Quick Start

Implement a Keystore-backed key and enable a strict network security config in your app.

Frequently Asked Questions about android-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure Android secrets at rest using Keystore-backed keys?▼

To secure Android secrets at rest, implement Keystore-backed keys and encrypted storage like EncryptedSharedPreferences or Tink. This protects sensitive data across trust boundaries by ensuring cryptographic operations remain confined to secure hardware.

What's the best way to configure certificate pinning and network security config in Android?▼

The best way to apply network hardening is by configuring a strict network security config and implementing OkHttp certificate pinning. This defends communications across trust boundaries by preventing man-in-the-middle attacks and enforcing trusted certificate chains.

Can I use biometrics to gate sensitive authentication flows in Android?▼

Yes, you can gate sensitive authentication flows using Android biometrics or device credentials. This prevents unauthorized access by requiring biometric verification before exposing secret management or authentication operations across trust boundaries.

When do I need Play Integrity checks for Android app security?▼

You need Play Integrity checks for Android app security when verifying runtime trust and device authenticity. This mechanism ensures the app has not been tampered with and is running on a genuine Android device, protecting secure flows across trust boundaries.

Related Skills

Explore More Software Engineering Skills→
maxrave-devmaxrave-dev
10.4k

gradle-build-performance

Analyze Gradle build scans and apply configuration patterns to optimize Android build performance.

Community
Advanced
Design-System-ETDesign-System-ET

security-reviewer

Identify security vulnerabilities and generate structured audit reports with severity ratings.

Official
Advanced
JFrangelJFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community
Advanced
herdiansahherdiansah
23

paypal-integration

Integrate PayPal payment processing with express checkout, recurring billing, and refunds.

Community
Advanced