modbender Setup
On first use, read setup.md for integration guidelines.
When to Use
User needs to publish, manage, or optimize Android apps on Google Play. Agent handles release workflows, store optimization, policy compliance, review processes, and rejection troubleshooting.
Architecture
Memory lives in ~/google-play-store/. See memory-template.md for structure.
~/google-play-store/
├── memory.md # Account, apps, preferences
├── apps/ # Per-app tracking
│ └── {package}/ # Package-specific notes
└── checklists/ # Saved submission checklists
Quick Reference
| Topic | File |
|---|---|
| Setup process | setup.md |
| Memory template | memory-template.md |
| Release tracks and rollouts | tracks.md |
| App Store Optimization | aso.md |
| Policy compliance | policies.md |
| Rejection recovery | rejections.md |
| Automation with Fastlane | fastlane.md |
Core Rules
1. Release Track Progression
| Track | Purpose | Review | Users |
|---|---|---|---|
| Internal | Daily builds, QA | None | 100 max |
| Closed | Beta testers | 2-6h | Email list |
| Open | Public beta | 2-6h | Anyone joins |
| Production | Full release | 2-24h | Everyone |
Mandatory progression for new apps:
Internal → Closed (20+ testers, 14+ days) → Production
Skip this = instant rejection. Start closed testing on day one.
2. Pre-Submission Checklist
Run before EVERY submission:
CONTENT
[ ] Privacy policy URL live and HTTPS
[ ] Data safety form 100% complete
[ ] Content rating questionnaire done
[ ] All screenshots show real app (no placeholders)
[ ] Feature graphic 1024x500 uploaded
TECHNICAL
[ ] Target SDK ≥ 34 (Android 14)
[ ] versionCode higher than ALL previous uploads
[ ] Signed with correct key
[ ] No hardcoded API keys in code
[ ] ProGuard/R8 not breaking functionality
TESTING (new apps only)
[ ] 20+ testers opted in (not just invited)
[ ] 14+ consecutive days completed
[ ] Crash-free rate > 99%
3. Version Code Strategy
versionCode must ALWAYS increase. Cannot reuse. Ever.
Pattern: YYYYMMDDHH
Example: 2025022514 (Feb 25, 2025, 2pm)
Why: Rejected uploads "burn" the versionCode.
Multiple builds per day need unique codes.
4. App Signing Models
| Model | Control | Recovery | Best For |
|---|---|---|---|
| Google-managed | Google holds key | Easy | New apps |
| Upload key | You sign, Google re-signs | Medium | Most apps |
| Self-managed | Full control | Hard | Enterprise |
Recommendation: Google-managed for new apps. Upload key for updates.
Critical: Export and backup your upload key immediately after creating it.
5. Staged Rollout Protocol
| Stage | % | Duration | Gate |
|---|---|---|---|
| Canary | 1% | 24-48h | Crashes < 0.1% |
| Early | 5% | 48-72h | ANRs < 0.5% |
| Mid | 20% | 72-96h | Ratings stable |
| Late | 50% | 96-120h | No regressions |
| Full | 100% | — | All clear |
Halt triggers: Crash spike, ANR spike, 1-star surge, critical bug reports.
6. ASO Essentials
| Element | Limit | Impact |
|---|---|---|
| Title | 30 chars | Highest |
| Short description | 80 chars | High |
| Full description | 4000 chars | Medium |
| Screenshots | 8 per type | High |
| Feature graphic | 1024x500 | Medium |
Keyword strategy:
- Title: Primary keyword + brand
- Short desc: Top 3 keywords naturally
- Full desc: Long-tail throughout
- Update quarterly based on Search Console
7. Response Time SLAs
| Action | Google Response | Your Deadline |
|---|---|---|
| Policy email | 7 days to fix | Respond in 3 |
| Appeal | 3-7 days | Submit in 24h |
| Data request | 30 days | Complete in 14 |
| Critical issue | 24h suspension | Immediate |
Rule: Never ignore policy emails. Silence = admission.
Common Traps
Publishing Traps
- Skipped closed testing → Cannot release to production. 20 testers + 14 days mandatory for new apps.
- Data safety incomplete → Instant rejection. Fill EVERY field even if "no data collected."
- Screenshots with mockups → Rejection for misleading. Use real app screenshots only.
- Privacy policy 404 → Rejection. Verify URL works before every submission.
Technical Traps
- versionCode not incremented → Upload rejected. Even rejected uploads burn codes.
- Target SDK too old → Rejection. Check current requirement before building.
- Forgot upload key password → Cannot update app. Store password in password manager.
- ProGuard broke app → Crashes after release. Always test release build.
Policy Traps
- Undeclared permissions → Policy violation. Justify EVERY sensitive permission.
- Background location without need → Rejection + strike. Remove or justify with video.
- Kids content undeclared → Policy violation. If ANY appeal to children, declare it.
- Deceptive ads → Suspension risk. Follow interstitial timing and close button rules.
Business Traps
- No staged rollout → Bad update hits everyone. Always start at 1%.
- Ignored policy email → Escalation to strike. Respond within 3 days.
- Multiple accounts to evade → Termination. One violation becomes account death.
Security & Privacy
Data that stays local:
- Package names and app status in ~/google-play-store/
- Submission checklists and workflow notes
- Release history and lessons learned
This skill stores ONLY non-sensitive metadata:
- App names and package identifiers
- Track status (internal/closed/production)
- Workflow preferences (manual vs CI/CD tool names)
- Checklist progress
This skill does NOT store and will refuse:
- API keys, service account JSON content
- Keystore files or passwords
- OAuth tokens or Play Console credentials
- Any secret or credential material
This skill does NOT:
- Upload apps or make network requests
- Access signing keys or certificates
- Execute Fastlane commands directly
User manages all credentials in their CI/CD system and runs commands themselves. The Fastlane examples are documentation only.
Related Skills
Install with clawhub install <slug> if user confirms:
android— Android developmentapp-store— iOS and Android publishingmobile— Cross-platform mobile
Feedback
- If useful:
clawhub star google-play-store - Stay updated:
clawhub sync