mobile-session-security
Installation
SKILL.md
Mobile Session Security (KMP + iOS / Android)
Session-layer hardening for a fintech app: lock the session after inactivity or on background, force biometric/passcode re-auth to resume, and keep sensitive UI (balances, PANs, tokens) out of app-switcher snapshots and screen recordings. Grounded in AndroidX Lifecycle/BiometricPrompt, WindowManager, UIKit, and LocalAuthentication.
- Secret storage / biometric-gated keys (iOS):
swift-security(Keychain,LAContext, Secure Enclave). - Secret storage (Android/KMP):
mobile-security(Keystore,setUserAuthenticationRequired). - Login / passkeys / OAuth:
authentication. This skill covers re-auth of an existing session, not first sign-in. - Scene/process lifecycle plumbing:
app-lifecycle. KMP boundary shape:expect-actual.