android-enterprise-security

name	android-enterprise-security
description	Deep-dive skills for banking and healthcare apps.
category	security
risk	high
source	community
date_added	2026-04-07
metadata	{"triggers":["@security","proguard","root detection"]}

Android Enterprise Security 🛡️

Hardening Android apps against reverse engineering and runtime modifications.

⚡ When to Use

• When requested to implement banking-grade security, obfuscation, or tamper-detection.

🏗️ Core Rules / Pillars

1. ProGuard / R8 Rules

• Pattern: Always explicitly keep domains, GSON/Moshi models, and JNI bridges. Use -keepattributes *Annotation*.

2. Root & Tamper Detection

• Pattern: Use Google Play Integrity API instead of hand-written root-checking scripts that look for su binaries.

🚧 Critical Anti-Hallucination Guards

• Trap: Do NOT use outdated SafetyNet APIs. SafetyNet is deprecated. Use Play Integrity API.