What is android-permissions-security?

Android permission and inter-process communication security guidance. Inter-process communication is how Android apps and components exchange requests and data.

Use it to review manifests, define custom permissions, check caller identity, secure component boundaries, and implement runtime permission flows.

It helps find overly broad permissions and protect services, receivers, and providers from unauthorized callers.

android-permissions-security — Skill for Claude Code by ArisGuimera

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add ArisGuimera/MobiAI-Core --skill android-permissions-security

Clone the repo

git clone --depth 1 https://github.com/ArisGuimera/MobiAI-Core

Made for: Claude Code.

Or install android, the plugin that ships this one along with the rest of its 35 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/arisguimera/mobiai-core/android-permissions-security/github.svg)](https://agentmods.dev/skills/arisguimera/mobiai-core/android-permissions-security)

Your own site

<a href="https://agentmods.dev/skills/arisguimera/mobiai-core/android-permissions-security"><img src="https://agentmods.dev/badge/skills/arisguimera/mobiai-core/android-permissions-security/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/arisguimera/mobiai-core/android-permissions-security"><img src="https://agentmods.dev/badge/skills/arisguimera/mobiai-core/android-permissions-security.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 57 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 5,906 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 100% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00057	$0.05906
Opus 5.5	$0.00023	$0.02362
Sonnet 5.5	$0.00011	$0.01181
Haiku 4.5	$0.00006	$0.00591

Measured yesterday against content hash 693d43a8d024, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

android-permissions-security scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to android-permissions-security — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/android/skills/google/android-permissions-security/SKILL.md · 599 lines

How it starts

The opening of the file, as written. The whole thing — 599 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Guidelines for auditing permission vulnerabilities, enforcing least privilege, securing IPC boundaries, and handling runtime permissions across the Android ecosystem.

Glossary

Runtime Permission: Dangerous permission (e.g., Camera, Location) that must be granted by the user at runtime on Android 6.0+ (API 23+).
Custom Permission: A permission defined by an app (<permission>) to restrict access to its exported components.
Protection Level: Attribute defining how the OS grants the permission (normal, dangerous, signature, knownSigner).
knownSigner: Protection flag (API 31+) granting signature-level access to partner apps matching trusted certificate digests.
SigningInfo: Object (API 28+) providing signing history and multiple signer certificates for an application.
Binder Calling Identity: Reliable UID representing the calling process obtained using Binder.getCallingUid().
URI Permission: Temporary, granular access granted to a content URI using grantUriPermissions and intent flags.

Prerequisites

Add androidx.core:core-ktx and androidx.activity:activity-ktx (or androidx.fragment:fragment-ktx) dependencies to the app-level build.gradle file for ContextCompat and ActivityResultContracts.
For knownSigner partner permissions (android:knownCerts), ensure the project compileSdk and targetSdk are at least 31 (Android 12).
For broadcast identity sharing (BroadcastOptions.setShareIdentityEnabled), ensure compileSdk and targetSdk are at least 34 (Android 14).

1. Security audit and permission gap detection playbook

When auditing an Android project for permission and IPC security vulnerabilities, systematically inspect each area:

Vulnerability Area	Search In / Pattern	Risk	Remediation Action
Weak Custom Permission Protection	`AndroidManifest.xml` with `android:protectionLevel="normal"`, `"dangerous"`, or `"signatureOrSystem"`	Unauthorized apps request or claim permission without restriction	Upgrade to `signature` or `signature
Overly Broad URI Permission Grants	`<grant-uri-permission android:pathPrefix="/" />` or `pathPrefix=""` in `<provider>`	Leaks all provider data to third parties	Replace with explicit scoped subpath (e.g. `android:pathPrefix="/shared/"`). Retain `android:grantUriPermissions="true"`. Remove any wildcard `pathPrefix="/"`.
Missing ContentProvider Split Permissions	`<provider>` with only generic `android:permission` or missing `android:readPermission` and `android:writePermission`	Read-only callers execute write operations or write-only callers access read operations	Configure granular `android:readPermission="...READ_DATA"` and `android:writePermission="...WRITE_DATA"`, AND declare the custom `<permission>` tags with `android:protectionLevel="signature"` (or `signature
Spoofable Caller Identity Checks	`intent.getStringExtra("calling_package")`, `intent.getStringExtra("sender")`, `callingPackage == "..."` in Services	Malicious callers forge intent extras or strings	Remove string checks; authenticate caller UID cryptographically using `Binder.getCallingUid()` and `pm.hasSigningCertificate()`.
Bound Service Permission Bypass	`checkCallingOrSelfPermission()` or `enforceCallingOrSelfPermission()` in Binder AIDL stubs	Falls back to host app UID outside IPC or when identity is cleared, causing Confused Deputy bypass	Replace with `enforceCallingPermission("...WRITE_DATA", ...)` or `checkCallingPermission("...WRITE_DATA")`.
Missing Method-Level Checks in Bound Services	Bound Service AIDL methods mutating state without enforcing write permissions	Callers with read-only binding access invoke mutating write operations	Add `enforceCallingPermission("...WRITE_DATA", "Caller lacks WRITE_DATA permission")` inside mutating AIDL methods.
Flawed Runtime Permission Flow	Missing `shouldShowRequestPermissionRationale()`, missing permanent denial handling, or re-requesting in loops	Poor user experience, infinite loops, or inability to recover permissions	Implement 3-state flow: check grant -> check rationale dialog -> launch contract. On permanent denial, redirect to `Settings.ACTION_APPLICATION_DETAILS_SETTINGS`.
Simultaneous Location Requests	`arrayOf(ACCESS_FINE_LOCATION, ACCESS_BACKGROUND_LOCATION)` in one request	Rejected by Android 11+ (API 30+)	Request foreground location (`ACCESS_FINE_LOCATION`, `ACCESS_COARSE_LOCATION`) first. Request `ACCESS_BACKGROUND_LOCATION` only after foreground is granted in a separate user step.
Broad Storage Permissions for Media	Requesting `READ_EXTERNAL_STORAGE` or `READ_MEDIA_IMAGES` for user image selection	Over-privilege, user privacy violation	Migrate to zero-permission Photo Picker (`ActivityResultContracts.PickVisualMedia`).
Cached Permission State	Storing permission status in `var cachedLocationPermissionGranted = ...`	Fails when permission is revoked or expires	Query `ContextCompat.checkSelfPermission()` dynamically at invocation time and wrap protected calls in try-catch blocks catching `SecurityException`.
Insecure Broadcasts	`sendBroadcast(intent)` without package target or receiver permission; receiver without sender authentication	Data interception or command spoofing	Set explicit package (`intent.setPackage(...)`), pass receiver permission, and enable `BroadcastOptions.setShareIdentityEnabled(true)` (API 34+) to verify `sentFromPackage`.

Read the full file on GitHub · 599 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 599 lines · 57 tokens per session scan A 693d43a8d024

Subscribe to this mod's changes

android-permissions-security is a skill published in the GitHub repository ArisGuimera/MobiAI-Core (489 stars, last pushed yesterday), licensed MIT. It adds 57 tokens to every session and 5,906 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to android-permissions-security, differing in 0 lines, and is treated as a copy.

Mobile Security

orca-emulator-android

Android device and emulator control from inside Orca over adb, with the live device view in Orca's emulator pane. Use when driving an adb-connected emulator or phone on Windows, Linux, or macOS: booting AVDs, taps, swipes, typing, hardware buttons, rotation, app install and launch, runtime permissions, the…

stablyai/orca · 102 tokens

glance-canonical-layouts

Use this skill to create home screen widgets using Jetpack Glance Canonical Layouts from the Android Platform Samples project, or when asked to implement standard widget layout patterns (including Check List, Image Grid, Snap Scrolling, and Standard Toolbar).

android/skills · 56 tokens

android-tombstone-symbolication

Symbolicate the .NET runtime frames in an Android tombstone file. Extracts BuildIds and PC offsets from the native backtrace, downloads debug symbols from the Microsoft symbol server, and runs llvm-symbolizer to produce function names with source file and line numbers. USE FOR triaging a .NET MAUI or Mono Android app…

dotnet/skills · 176 tokens

dogfood

Systematically explore and test a mobile app on iOS/Android with agent-device to find bugs, UX issues, and other problems. Use when asked to dogfood, QA, exploratory test, find issues, bug hunt, or test this app on mobile.

callstack/agent-device · 55 tokens

winapp-maui

Package and sign .NET MAUI Windows apps with winapp: publish the Windows head first, then point packaging at the resolved resizetizer manifest. Use for a MAUI MSIX or signed unpackaged build, MAUI packaging in CI, or 'manifest contains unresolved placeholders' errors from winapp package.

microsoft/winappCli · 68 tokens

apple-search-ads

When the user wants to set up, optimize, or scale Apple Search Ads (ASA) campaigns — including keyword bidding, match types, campaign structure, Creative Product Sets, CPP routing, and ROAS optimization. Use when the user mentions "Apple Search Ads", "ASA", "Search Ads", "Search tab ads", "Today tab ads", "CPT"…

Eronred/aso-skills · 127 tokens