android-security-skill

What problem does it solve?

It solves gaps in Android application security knowledge by translating official guidance into actionable best practices, so you can prevent common vulnerabilities in real app development work.

Core Features & Use Cases

• Communication security guidance: Helps you harden HTTPS/TLS usage, Network Security Config, WebView handling, and safer IPC patterns.
• Sensitive data protection: Guides secure storage choices for internal/external storage, SharedPreferences, logging, and content provider access.
• Secure component and permission design: Covers android:exported controls, service/receiver/activity hardening, and minimizing or replacing dangerous permissions.
• Authentication and credential safety: Supports Credential Manager, passkeys, biometrics, and safe credential handling patterns.
• Cryptography and key management: Provides practical, Android Keystore-oriented crypto practices, plus API-key handling and recommended algorithm usage.
• AI/LLM security risk coverage: Addresses prompt injection, sensitive disclosure, and excessive agency mitigations when apps use LLM features.

Quick Start

Use the android-security-skill skill to review how to securely implement a feature by asking: “Help me review my Android app’s authentication, data storage, and exported component settings against official Android security guidance.”