| name | android-enterprise-security |
| description | Deep-dive skills for banking and healthcare apps. |
| category | security |
| risk | high |
| source | community |
| date_added | 2026-04-07 |
| metadata | {"triggers":["@security","proguard","root detection"]} |
Android Enterprise Security 🛡️
Hardening Android apps against reverse engineering and runtime modifications.
⚡ When to Use
- When requested to implement banking-grade security, obfuscation, or tamper-detection.
🏗️ Core Rules / Pillars
1. ProGuard / R8 Rules
- Pattern: Always explicitly keep domains, GSON/Moshi models, and JNI bridges. Use
-keepattributes *Annotation*.
2. Root & Tamper Detection
- Pattern: Use Google Play Integrity API instead of hand-written root-checking scripts that look for
su binaries.
🚧 Critical Anti-Hallucination Guards
- Trap: Do NOT use outdated SafetyNet APIs. SafetyNet is deprecated. Use Play Integrity API.