Install
$ agentstack add skill-kelvinkosbab-appbootstrapai-android-gradle-architecture-pro ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Review Android Gradle build configuration for adherence to modern multi-module conventions. The reference pattern is Now in Android (NiA) — Google's official reference app — which factors all repeated android { ... } and dependency declarations into convention plugins under build-logic/convention/. Report only genuine problems; don't nitpick.
Review process:
- Inventory the build-file landscape using
references/inventory.md— which files exist, what each is responsible for. - Check the convention-plugin factoring using
references/convention-plugins.md— is repeated config extracted? Where does it live? - Validate version-catalog discipline using
references/version-catalogs.md— no inlineimplementation("group:artifact:version")strings, no hardcoded versions inbuild.gradle.kts. - Validate the multi-module graph using
references/multi-module-graph.md—:app+:feature:*+:data:*+:core:*shape, dependency direction. - Check AGP / Kotlin / Compose-compiler co-versioning using
references/agp-versioning.md. - Verify KSP is used over kapt for all supported annotation processors using
references/ksp-over-kapt.md.
If doing a partial review, load only the relevant reference files.
Core Instructions
- Now in Android is the reference. When in doubt, check what NiA does. Their convention plugins under
build-logic/convention/are the canonical examples. - Convention plugins are non-negotiable past 3 modules. Once you have a
:feature:home,:feature:settings,:feature:profile, the third repeatedandroid { compileSdk = 34; defaultConfig { minSdk = 26; ... } }block is a smell. Factor. - Version catalogs are the single source of truth. Every version literal in a
build.gradle.ktsis a regression — there's always a[versions]entry it should reference. - AGP version is grounded in AGP 8.x for this skill. AGP 9 specifics are unverified; if the project uses AGP 9, defer to the actual release notes rather than this skill's guidance.
- Don't suggest applying convention plugins where they're not warranted. A single-module app doesn't need
build-logic/convention/. Convention plugins are a multi-module concern. - Don't introduce
buildSrc/for new code. Thebuild-logic/composite-build pattern supersededbuildSrcbecause the latter invalidates Gradle's cache more aggressively. NiA usesbuild-logic; new projects should too.
Output Format
Organize findings by file. For each issue:
- State the file and relevant line(s).
- Name the rule being violated.
- Show a brief before/after.
Skip files with no issues. End with a prioritized summary.
Example output:
feature/home/build.gradle.kts
Line 12: Repeated android { } block — extract to a convention plugin.
// Before
android {
namespace = "com.kozinga.feature.home"
compileSdk = 34
defaultConfig { minSdk = 26 }
buildFeatures { compose = true }
}
// After
plugins {
alias(libs.plugins.kozinga.android.feature)
alias(libs.plugins.kozinga.android.library.compose)
}
android {
namespace = "com.kozinga.feature.home"
}
Line 28: Inline dependency string — use the version catalog.
// Before
implementation("androidx.core:core-ktx:1.15.0")
// After
implementation(libs.androidx.core.ktx)
build-logic/convention/build.gradle.kts (missing)
No build-logic/ convention-plugin module — three feature modules repeat the same android {} block. Create build-logic/convention/ and factor AndroidFeatureConventionPlugin.
Summary
- Architecture (high): No convention plugins; three
:feature:*modules duplicateandroid {}configuration. - Catalog discipline (medium): Four inline dependency strings across
feature/home/build.gradle.ktsandfeature/settings/build.gradle.kts— migrate tolibs.versions.toml. - kapt → KSP (low):
kaptfor Hilt — switch toksp(libs.hilt.compiler)for faster builds.
End of example.
References
references/inventory.md— what every Android Gradle file is responsible for (settings.gradle.kts, rootbuild.gradle.kts, modulebuild.gradle.kts,libs.versions.toml,gradle.properties,build-logic/).references/convention-plugins.md— how to author a convention plugin inbuild-logic/convention/, the NiA factoring (AndroidApplicationConventionPlugin,AndroidLibraryConventionPlugin,AndroidComposeConventionPlugin,AndroidFeatureConventionPlugin,AndroidHiltConventionPlugin,AndroidApplicationJacocoConventionPlugin).references/version-catalogs.md—libs.versions.tomldepth,[bundles], plugin entries, migration patterns from inline strings.references/multi-module-graph.md—:app+:feature:*+:data:*+:core:*shape, dependency direction, how features avoid depending on each other.references/agp-versioning.md— AGP/Kotlin/Compose-compiler version matrix (AGP 8.x), the Kotlin 2.0+ Compose plugin model, common upgrade pitfalls.references/ksp-over-kapt.md— KSP-first stance for Hilt / Room / Moshi / Glide, what migration looks like, what still requires kapt.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: kelvinkosbab
- Source: kelvinkosbab/AppBootstrapAI
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.