play-policy-insights

Audits Android apps against Google Play policies and generates compliance reports.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/RavitejaKarra24/dotfiles --skill play-policy-insights-ravitejakarra24
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: play-policy-insights
Source: https://github.com/RavitejaKarra24/dotfiles/tree/main/pi/.pi/agent/skills/play-policy-insights
Command: npx skills add https://github.com/RavitejaKarra24/dotfiles --skill play-policy-insights-ravitejakarra24

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Submitting an Android app to Google Play risks rejection or account suspension when code violates policies on restricted permissions, data safety declarations, or prominent disclosures. This Skill automates a pre-submission audit by cross-referencing static code analysis with Play Store declarations to surface violations before review. ## Core Features & Use Cases - Static Policy Audit: Scans manifests, permissions, and source code for restricted permission misuse (exact alarms, all files access, background location, SMS/call log, accessibility APIs) and foreground service misconfiguration. - Data Safety Cross-Check: Traces data sources to off-device sinks, verifies prominent disclosures, and compares detected collection against the app's published Play Store Data Safety label. - Deterministic Compliance Report: Aggregates worker findings through a critic review pass and renders a Markdown report with severity ratings, evidence citations, and a remediation checklist. - Use Case: Before uploading a new release, run the audit on your app directory to detect an undeclared READ_CONTACTS usage or a missing foregroundServiceType, then fix the flagged files and update your Play Console declarations. ## Quick Start Audit my Android app in the current project directory for Google Play policy compliance and generate the compliance report.

Frequently Asked Questions about play-policy-insights

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit an Android app for Google Play policy compliance?

Run the orchestrator script with your app directory to perform static analysis, then execute the generated audit goals covering permissions, data safety, and disclosures. The final step produces a compliance_report.md with severity-rated findings and remediation steps.

How to check if my app's Data Safety label matches its code?

The audit traces each detected data source to its transmission sink, classifies it by PSL constant, and compares it against your published Play Store Data Safety declarations. Discrepancies appear in a comparison table showing code detection versus Play Store declaration status.

Does the audit work without sub-agent delegation support?

Yes, it supports a sequential self-execution mode where the agent reads each worker and critic prompt file and writes the expected JSON outputs itself. Delegation mode with parallel sub-agents is used only when the environment provides task-spawning tools.

What Android permissions does the audit flag as violations?

It flags restricted permissions unjustified by core functionality, including MANAGE_EXTERNAL_STORAGE, QUERY_ALL_PACKAGES, USE_EXACT_ALARM, background location, SMS and call log access, broad contacts and media access, and misconfigured accessibility or foreground services.

Why did the audit stop after the orchestrator init step failed?

The skill enforces a fail-fast mandate: the Phase 1 automated analysis is the source of truth, so if orchestrator.py fails the audit stops immediately with an error explanation. Manual auditing is explicitly forbidden as a fallback.