What problem does it solve? Android apps that handle incoming Intents, PendingIntents, and exported components are vulnerable to Intent redirection, component hijacking, and unauthorized data access. This Skill provides concrete patterns to audit and secure Activities, Services, Broadcast Receivers, and ContentProviders. ## Core Features & Use Cases - Safe Intent Redirection: Validate nested Intents manually or with AndroidX IntentSanitizer before launching, blocking cross-app redirection and URI permission abuse. - PendingIntent Hardening: Enforce FLAG_IMMUTABLE by default and require explicit target components for mutable PendingIntents. - Component Protection: Apply signature-level permissions, exported flags, and runtime caller signature verification for Services and ContentProviders. - Use Case: While auditing an AndroidManifest.xml, you find an exported activity that forwards a nested Intent extra. Use this Skill to replace the unsafe launch with an IntentSanitizer allowlist and generate a structured security alignment report. ## Quick Start Audit my AndroidManifest.xml and the intent-handling code in MainActivity.kt for Intent redirection vulnerabilities and apply the recommended fixes.
