SKILL.md
Mobile Security
Priority: P0 (CRITICAL)
Standards for basic mobile security and PII protection.
Implementation Guidelines
- Secure Storage: Use
fluttersecurestoragefor tokens/PII. Never useshared_preferences. - Hardcoding: Never store API keys or secrets in Dart code. Use
--dart-defineor.env. - Obfuscation: Always release with
--obfuscateand--split-debug-info. - SSL Pinning: For high-security apps, use
diocertificatepinning. - Root Detection: Use
flutterjailbreakdetectionfor financial/sensitive applications. - PII Masking: Mask sensitive data (email, phone) in logs and analytics.
Reference & Examples
For SSL Pinning and Secure Storage implementation details: See [references/REFERENCE.md](references/REFERENCE.md).
Related Topics
layer-based-clean-architecture | performance