Android Exported Components Without Permission vs gh-attach
Android Exported Components Without Permission and gh-attach are both developer tools skills. gh-attach scores higher (89 vs 27 out of 100). gh-attach has more GitHub stars (40k), and gh-attach was updated more recently (today). The table compares them side by side.
| Android Exported Components Without Permission | gh-attach | |
|---|---|---|
| Score | 27 / 100 | 89 / 100 |
| What it does | Detects Android Activities, Services, BroadcastReceivers, and ContentProviders exported without proper permission checks. | Uploads a local file (screenshot, image, PDF, zip, video) to GitHub user-attachments, downloads GitHub user-attachments, and embeds local files in a PR, issue, or comment. Use when asked to "attach a screenshot to the PR", "add an image to the issue", "embed before/after screenshots", "attach this file", or "download this GitHub attachment". Powered by `gh-attach`. |
| Publisher | Community: zakirkun | Community: github |
| Grades | Maintenance D, Licence F, Quality C | Maintenance A, Licence A, Quality A |
| npm downloads a week | Not on npm | Not on npm |
| Runs | Skill | Skill |
| Works with | Claude Code, Claude apps | Claude Code, Claude apps |
| GitHub stars | 40 | 40,340 |
| Last commit | 19 Mar 2026 | 23 Oct 2026 |
| Licence | NOASSERTION | MIT |
| Listed since | 19 Oct 2026 | 22 Oct 2026 |
| Install Android Exported Components Without Permission | Install gh-attach |
Questions
Is Android Exported Components Without Permission or gh-attach more popular?
gh-attach has more GitHub stars: 40,340.
Can I use Android Exported Components Without Permission and gh-attach together?
Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.