Menu
Standards for Intents, WebViews, and FileProvider
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Foundational "High-Density" standard for token-optimized agent instructions and CLI-based automated activation.
Universal principles for clean, maintainable, and robust code across all environments.
Standards for performing high-quality, readable code reviews.
Essential rules for code comments, READMEs, and technical documentation.
CRITICAL - Before ANY file write, audit loaded skills for violations. Auto-report via feedback command.
Universal standards for version control, branching, and team collaboration.
| name | Android Legacy Security |
| description | Standards for Intents, WebViews, and FileProvider |
| metadata | {"labels":["android","security","legacy","intents"],"triggers":{"files":["**/*Activity.kt","**/*WebView*.kt","AndroidManifest.xml"],"keywords":["Intent","WebView","FileProvider","javaScriptEnabled"]}} |
resolveActivity before starting.android:exported logic (as per security skill).javaScriptEnabled = false. Only enable for trusted domains.allowFileAccess to prevent local file theft via XSS.file:// URIs. Use FileProvider.**No Implicit for Internal**: Use Explicit Intents (class name).**No MODE_WORLD_READABLE**: SharedPreferences/Files.