Skill UI

A comprehensive guide to implementing Clean Architecture patterns for both Android and Kotlin Multiplatform (KMP) projects. It covers robust module structuring, dependency inversion rules, defining UseCases and Repositories, and designing the data layer using technologies like Room, SQLDelight, and Ktor. Learn how to separate concerns, maintain platform independence, and manage complex data flows.

A comprehensive guide to building highly performant and reusable UIs across multiple platforms (Android, iOS, Desktop, Web) using Compose Multiplatform and Jetpack Compose. It details advanced patterns for state management (Single State Object, Event Sink), type-safe navigation, slot-based composables, platform adaptation (Expect/Actual), and crucial performance optimization techniques.

A comprehensive guide to mastering structured concurrency, reactive streams, and state management in Kotlin. Covers advanced topics like Flow operators (debounce, retryWhen), StateFlow for UI state, and implementing robust asynchronous logic for Android and Kotlin Multiplatform projects. Essential for modern Android development.

A comprehensive tool for performing static analysis on Android APK malware samples. It utilizes androguard, apktool, and jadx to detect dangerous permission combinations, suspicious API calls (like reflection or crypto), dynamic code loading patterns, and extract Indicators of Compromise (IOCs) for robust security incident response and threat hunting.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

Guide for performing Android and iOS mobile application penetration testing with OWASP MASTG/MASVS, covering static/dynamic analysis, data storage checks, API abuse, and runtime manipulation using Frida, Objection, and MobSF.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

This skill enables sophisticated runtime dynamic analysis of Android applications using industry-standard tools like Frida and Objection. It is used to observe application behavior, intercept API calls, monitor network traffic, and bypass client-side security protections (e.g., root detection, anti-debugging). Essential for identifying vulnerabilities and analyzing obfuscated code that static analysis cannot reach.

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

Executes a structured VC valuation workflow that ingests SaaS or startup metrics, runs DCF, comparable revenue multiples, and SaaS health models via Python, and synthesizes a defensible valuation, runway, and capital-efficiency narrative for users planning fundraising or benchmarking.