flutter-apk-security - Flutter Android APK Security Review
Review Flutter Android APK and AAB release artifacts for manifest, permission, cleartext traffic, secret, signing, and WebView security risks.
Tags
Updated: 2026-09-24Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Inspect APK or AAB artifacts
- Download published Android APKs
- Inspect Android manifest permissions
- Extract strings from libapp.so
- Verify release APK signatures
- Inspect decompiled wrapper code
Inputs
- Android APK or AAB artifact
- Android package name
- Google Play account credentials
Outputs
- Security review report
- Extracted evidence and strings
- Downloaded APK artifact
Requirements
- apkeep CLI tool
- aapt2 tool
- apksigner or keytool
- JADX decompiler