DEVELOPER CONSOLE

Submit Mini-App for Security Audit

Upload your compiled .pkg container. Our automated verification pipeline will screen your manifest, entry points, and path boundaries before enrolling your app in the mandatory 15-day review queue.

Package Archive Upload

Must be a valid .pkg ZIP container under 50 MB containing manifest.json and entry assets.

Drag and drop your .pkg file here
or

15-Day Security Audit Workflow

Every mini-app submitted to MistFox undergoes strict verification to protect users from malicious reflection, Zip Slip file overwrites, and unauthorized hardware access.

1
Automated Static Analysis (Instant)

Immediate Zip Slip detection, manifest schema validation, and path traversal check.

2
15-Day Manual Code Review

Platform security engineers inspect background scripts, native API usage, and privacy compliance.

3
Automated Cryptographic Signing

Upon approval, the system signs your package using the official platform SHA256withRSA private key.

4
Store Publication

The signed package is published to mistfox.int.yt with direct in-app install links.

Package Rejection Criteria:
  • Attempts to invoke addJavascriptInterface
  • Zip entries containing .. or path traversal
  • Manifest missing required entry file in archive
  • Unsanitized dynamic eval() of remote network strings