mobile.androidAndroid app configuration
Checks AndroidManifest.xml (text or binary, from source trees, APKs and AABs) and network security configs for debuggable builds, backups, cleartext traffic, exported components, sensitive permissions, outdated SDK levels, task hijacking and unverified deep links.
- Engine
- Built-in
- Targets
- Mobile build
- Areas
- Security, Privacy, Best practices
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit ./app-release.apk --only mobile.androidBuilt into openaudit; nothing to install.