skills.rest
JCETools-Petra
JCETools-PetraCOMMUNITY
Explore all skills by this author →
GitHub

android-security

Audit Android manifest components and security configuration for unsafe exposure.

16|Updated Apr 30, 2026
Search Tags:#android#webview#deep links#network security config#manifest security#exported components#secrets storage
One-click install
npx skills add https://github.com/JCETools-Petra/JCE-Opencode-Tools --skill android-security-jcetools-petra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: android-security
Source: https://github.com/JCETools-Petra/JCE-Opencode-Tools/tree/main/config/skills/android-security
Command: npx skills add https://github.com/JCETools-Petra/JCE-Opencode-Tools --skill android-security-jcetools-petra

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you review and harden common Android security risks that can lead to data exposure, unsafe component exposure, and insecure network or storage behavior.

Core Features & Use Cases

  • Manifest security review: Check permissions, android:exported components, and intent/deep-link surfaces for least-privilege and unintended access.
  • WebView and network hardening: Validate WebView-related security posture and ensure network security configuration prevents unsafe behaviors like cleartext traffic when not intended.
  • Secret storage and backup safety: Evaluate local secret handling and backup rules to reduce the chance of credential leakage.
  • Use Case: Before releasing a new app feature that adds deep links and WebView content, use this Skill to identify risky exported components and insecure traffic/storage settings, then verify the changes with build/manifest checks.

Quick Start

Ask the AI to run an Android security review of my app’s AndroidManifest.xml and related security configuration to flag exported component risks, permission issues, deep link vulnerabilities, WebView concerns, cleartext traffic settings, and backup/secret storage exposure, and then tell me what to verify and what risks remain if verification is incomplete.

Frequently Asked Questions about android-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my AndroidManifest.xml for unsafe exported components and deep link vulnerabilities?▼

Android WebView security auditing involves validating WebView configuration to prevent unsafe behaviors and ensure network security config blocks unintended cleartext traffic. You must verify related build settings and flag insecure traffic or storage behaviors when evidence of safe configuration is incomplete.

What is the best way to harden Android app network security configuration and prevent cleartext traffic?▼

Preventing Android backup and credential leakage requires evaluating local secret handling and backup rules to reduce the chance of exposing sensitive data. You must review backup configuration and secret storage behaviors, then verify build settings to ensure credentials are not leaked.

How do I check Android app backup rules and local secret storage for credential leakage?▼

Checking Android backup rules and local secret storage for credential leakage requires evaluating local secret handling and backup configurations to reduce exposure risks. You must validate storage behaviors and explicitly report remaining attack-surface risks if build verification evidence is incomplete.

Can I use an automated security review for Android app release preparation?▼

You can use an automated security review for Android app release preparation to audit manifest components, WebView settings, and network security configuration. The review mandates explicit reporting of attack-surface risks and requires targeted build verification when evidence of secure configuration is incomplete.

Related Skills

Explore More Software Engineering Skills→
JCE-Joshhh77JCE-Joshhh77
16

android-security

Inspect Android manifest exports, permissions, and sensitive storage for attack surfaces.

Community
Intermediate
gke-labsgke-labs
42

review-security-k8s-rbac

Analyze Kubernetes RBAC manifests and live clusters for privilege escalation risks.

Official
Advanced
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
jd-opensourcejd-opensource
299

pentest-mobile-app

Automate Android and iOS mobile app security testing with Frida and MobSF.

Official
Advanced