android-intent-security
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidelines for Android development, focusing on component isolation and safe IPC (Inter-Process Communication).
- [SAFE]: Code examples demonstrate industry-standard security practices, including the use of
IntentSanitizer, signature-level permissions, andFLAG_IMMUTABLEforPendingIntents. - [SAFE]: Input validation and sanitization patterns for
ContentProviderqueries are correctly implemented usingSQLiteQueryBuilderand parameterized arguments to prevent SQL injection. - [SAFE]: Verification of calling app signatures is correctly implemented using
PackageManager.hasSigningCertificatewith SHA-256 fingerprint matching. - [SAFE]: The documentation includes a list of anti-patterns to avoid, such as using sticky broadcasts or launching unvalidated nested intents.
Audit Metadata