Hi! No worries — this is a false positive.
The app does not contain any virus or harmful code.
Some antivirus engines incorrectly flag apps that:
- include a built-in local server (NanoHTTPD)
- load HTML/JS from assets
- use WebView with storage
- are unsigned / not from Google Play
These types of ports are very commonly flagged as Riskware even when they're 100% safe.
About permission ( i add because i'm coding save data for isaac)
- READ ( to game can read save data externaly from android )
- WRITE ( to game can write externaly save data to android )
- ACCESS ( is not needed and it's will be removed )