CtrlK
BlogDocsLog inGet started
Tessl Logo

android-security

Secure Android data at rest and authentication secrets. Use for auth tokens, encrypted storage, and app-data isolation; defer WebView/Intent/FileProvider to android-legacy-security and TLS/certificate pinning to android-networking.

67

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A concise, actionable standards skill that appropriately offloads code to a single reference file. Its main weakness is the absence of any sequenced workflow or validation feedback loop, though that is partly inherent to a checklist-style skill.

Suggestions

Add a short inline code snippet for the most common case (e.g. EncryptedSharedPreferences setup) so the body is copy-paste ready without opening the reference.

For operations that modify manifests or build configs, include an explicit validation/verification step (e.g. 'build and confirm no cleartext warnings') to strengthen workflow clarity.

Clarify what references/implementation.md contains beyond 'Setup Examples' (e.g. note it holds Kotlin and XML snippets) so the navigation signal is more precise.

DimensionReasoningScore

Conciseness

Lean bullet-point standards with no padding and no re-explanation of concepts Claude already knows; every line carries a concrete directive.

5 / 5

Actionability

Concrete API and file references (EncryptedSharedPreferences, Android Keystore, network_security_config.xml with cleartextTrafficPermitted="false", Uri.Builder/HttpUrl, Play Integrity API) give executable guidance, though no copy-paste code is inlined in the body.

4 / 5

Workflow Clarity

Content is a well-organized standards checklist (Data Storage, Network, Component Export, Anti-Patterns) rather than a sequenced multi-step process, and lacks explicit validation checkpoints.

3 / 5

Progressive Disclosure

Overview body keeps directives inline while deferring code examples to a real, clearly signaled one-level-deep reference (references/implementation.md), with minor room to better label what that file contains.

4 / 5

Total

16

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tight, well-scoped description that states concrete capabilities, an explicit use-when clause, and clear boundary guidance against sibling skills. Minor trigger-term synonyms could be added for fuller coverage.

DimensionReasoningScore

Specificity

Names the domain and several concrete capabilities ("data at rest", "authentication secrets", "auth tokens", "encrypted storage", "app-data isolation"), but coverage is bounded to its niche rather than comprehensive.

4 / 5

Completeness

Explicitly answers both what ("Secure Android data at rest and authentication secrets") and when ("Use for auth tokens, encrypted storage, and app-data isolation") with concrete trigger phrases.

5 / 5

Trigger Term Quality

Includes natural phrases a user would say ("auth tokens", "encrypted storage", "app-data isolation") with good coverage, though a few common synonyms (e.g. "API keys", "secure storage") are absent.

4 / 5

Distinctiveness Conflict Risk

Clear niche reinforced by explicit deferral clauses ("defer WebView/Intent/FileProvider to android-legacy-security and TLS/certificate pinning to android-networking"), minimizing overlap with sibling skills.

5 / 5

Total

18

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository
HoangNguyen0403/agent-skills-standard
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.