android-intent-security
Best practices for Android Intent security. Use this skill when auditing component configurations in AndroidManifest.xml activities, services, receivers) or source code handling incoming Intents (getIntent, getParcelableExtra) to prevent Intent Redirection and unauthorized access.
Install
With your agent
Install OMGSkills skill "android/skills:android-intent-security" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/android/skills /tmp/skills && ln -s /tmp/skills/security/android-intent-security ~/.claude/skills/android-intent-securityFrom README
Glossary Intent: An asynchronous messaging object used to request an action from another app component. Exported component: A component (android:exported="true") that can be launched by other apps on the device. Sticky intent: A broadcast intent that remains in the system cache after it's sent, allowing any app to retrieve its contents. Signature permission: A permission whose protection level is set to signature, granted only to apps signed with the same developer key. onNewIntent: An activity lifecycle callback invoked when an activity is launched with FLAGACTIVITYSINGLETOP and is already running at the top of the history stack. PendingIntent: A token granted to a foreign application (for example, system services) allowing it to execute a predefined Intent with the creator's permissions. Mutable PendingIntent: A PendingIntent whose underlying Intent parameters can be modified by the receiving application.
More from this repo
android-cli
Provides instructions for installing and using the `android` CLI.
navigation-3
Learn how to install and migrate to Jetpack Navigation 3, and how to implement features and patterns such as deep...
r8-analyzer
Analyzes Android build files and R8 keep rules to identify redundancies, broad package-wide rules, and rules that...