android-permissions-security
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate educational resource for Android security. It provides correct remediation for several critical Android vulnerability classes: \n
- Caller Verification: It correctly advises against using spoofable intent extras and provides a secure implementation using
Binder.getCallingUid()andPackageManager.hasSigningCertificate()to verify identity cryptographically. \n - Binder Security: It identifies the 'Confused Deputy' risk associated with
checkCallingOrSelfPermission()and instructs developers to useenforceCallingPermission()instead. \n - ContentProvider Security: It provides guidance on granular URI permissions and split read/write permissions to prevent data leakage. \n
- External References: All links and dependencies (e.g.,
androidx.core,developer.android.com) originate from trusted sources and are consistent with the 'android' vendor context.
Audit Metadata