Does this skill support iOS security?

No, this specific skill is focused exclusively on Android security configurations. iOS security guides are typically handled by a separate skill.

How does it help with SSL pinning?

The skill provides the recommended native Android network_security_config.xml implementation for robust certificate pinning, which is more secure than Dart-only callbacks.

Can it detect hardcoded secrets?

Yes, it provides guidance and patterns to identify and move hardcoded API keys or sensitive tokens into secure storage solutions.

How does it handle code obfuscation?

It provides the specific Flutter build commands and ProGuard/R8 configurations required to obfuscate your code and strip debug symbols in release builds.

Is it compliant with Korean security standards?

Yes, the skill is specifically designed based on the Korean Ministry of Public Administration and Security (MOIS) and KISA mobile security guidelines.

Flutter Android Security Auditor

Name: Flutter Android Security Auditor
Author: LinaYoun

byLinaYoun

0•

Mobile Development

Audits and hardens Flutter Android applications against security vulnerabilities using KISA and MOIS mobile security guidelines.

This skill provides a comprehensive security framework for Flutter developers focusing on the Android platform. It offers automated auditing and implementation guidance for critical security domains, including AndroidManifest.xml configuration, secure data storage via flutter_secure_storage, and robust network security using native Android certificate pinning. By aligning with Korean Ministry of Public Administration and Security (MOIS) and KISA guidelines, this skill helps developers mitigate risks such as hardcoded secrets, cleartext traffic, and unauthorized data extraction before app deployment.

Key Features

010 GitHub stars

02Native Android network_security_config.xml and SSL pinning configuration

03Code protection guidance for R8/ProGuard and Flutter obfuscation

04Encrypted data storage implementation patterns for SharedPreferences and SQLite

05Root detection and secure platform interaction (Intent/Broadcast) patterns

06Automated AndroidManifest.xml security auditing for backup and debug settings

Use Cases

01Conducting a pre-release security audit for Google Play Store deployment

02Hardening application code against reverse engineering and data leaks

03Implementing certificate pinning to prevent Man-In-The-Middle (MITM) attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add linayoun/tdd-flutter-security flutter-mobile-security

For use in Claude.ai and ChatGPT

Download Skill