android-security-skill

Secure exported Android components by hardening `android:exported` controls and minimizing dangerous permissions. Implementation guidance involves safe API usage and validation requirements sourced directly from official Android Developers documentation to prevent component exposure vulnerabilities.

Best practices for Android cryptography involve using Android Keystore-oriented crypto practices and recommended algorithms. It provides official documentation-backed recommendations for API-key handling and secure key management without adding non-official assumptions.

Protect sensitive data in Android apps by following official guidance for secure storage choices involving internal and external storage. It translates official Android documentation into actionable best practices for SharedPreferences, logging, and content provider access.

Harden HTTPS and TLS configuration for Android communication security by applying Network Security Config and safer IPC patterns. It offers actionable best practices for WebView handling and secure defaults sourced from AOSP and Android Developers documentation.

Yes, you can review app authentication patterns with Credential Manager, passkeys, and biometrics. It supports safe credential handling patterns by providing documentation-backed recommendations for authentication and credential safety.

Mitigate LLM prompt injection and sensitive disclosure risks in Android apps by applying AI security guidance. It addresses excessive agency mitigations and provides best-practice guidance for secure defaults when apps use LLM features.