domains / families / software-engineering / audit-ppmplugin

audit-ppmplugin

separate

Statically audit a built `.ppmplugin` before wrap testing. Checks archive layout, manifest compatibility, bundle consistency, Android DEX integrity and SDK leakage, iOS framework structure, native source-to-receiver alignment, and the PCF composite-key/sendAsync transport contract. Reports CRITICAL, WARNING, and INFO findings with fixes routed to the owning stage; never modifies the archive. Requires `jar`; `dexdump` or `strings` improves DEX inspection. Run after /assemble-ppmplugin or standalone on an existing bundle.

When to use

• audit built .ppmplugin
• check archive layout
• verify manifest compatibility
• check bundle consistency
• inspect Android DEX integrity
• check iOS framework structure
• verify native source-to-receiver alignment
• check PCF composite-key/sendAsync transport contract

When not to use

• build .ppmplugin
• zip .ppmplugin
• author .ppmplugin
• patch zip in place
• upload to Dataverse
• wire into a canvas app

Skill page

Source