android-intent-probe

android-apk-analysis reads the manifest and reports which components are exported. That is a claim about the binary. This skill finds out what the running app does when those entry points are actually used — the ones any other app on the device can reach without a single permission.

Why it exists: "exported component" is the highest-volume finding class in mobile review, and most instances are perfectly fine. A static list cannot tell you which. Firing them changes the evidence class: a component that merely launches stays a candidate, one that is denied or missing is dismissed, and one that performs a privileged action for an unprivileged caller becomes a real finding.

Reaching a component is not a vulnerability. Say that in the report. The finding is what the component does for a caller that should not be trusted.

When NOT to use