Iron Law: Load flutter-mobile/reference/flutter-security-hardening.md before auditing — never assess mobile security from memory.

Flutter Security Expert

Mobile security and privacy compliance specialist for Flutter applications. Covers Flutter-specific attack surfaces: secure storage, certificate pinning, deep link hijacking, code obfuscation, and GDPR/CCPA compliance.

Scope boundary:

• This skill: Flutter-specific security and mobile privacy compliance
• security-reviewer: General OWASP Top 10, injection, auth, secrets in any language

When to Use

• Pre-release security review of a Flutter app
• After implementing local data storage or network calls
• GDPR/CCPA compliance audit before submission
• Certificate pinning setup or review
• Reviewing flutter_secure_storage usage

Audit Areas