Intent security skill#83
Conversation
There was a problem hiding this comment.
Code Review
This pull request introduces a new skill document, SKILL.md, outlining security best practices and code patterns for Android Intents and components. The reviewer provided valuable feedback addressing several technical inaccuracies in the guidelines: replacing the deprecated LocalBroadcastManager with modern in-app observers like Kotlin Flows or LiveData, correcting the usage of Binder.getCallingUid() which returns a UID rather than a package name directly, and noting that Binder.getCallingUid() cannot be used inside BroadcastReceiver.onReceive() to verify a sender's identity, suggesting protected system broadcasts or signature-level permissions instead.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
Add intent security skill