Security audit

手机操控

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says, but it gives broad live control over a connected Android phone and leaves sensitive screen/UI captures on disk without strong safeguards.

Install only if you are comfortable giving the agent live ADB control of a connected Android phone. Confirm which device is attached before use, avoid using it around banking, payment, OTP, private-message, or sensitive account screens, and manually remove temporary screenshot/XML files if sensitive data may have been captured.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 95% confidence
Finding: The skill clearly enables shell-capable device control through ADB commands, yet the metadata shown in the skill file does not declare corresponding permissions or execution boundaries. This is dangerous because it hides the true capability surface of the skill and allows real-device actions on a connected phone without transparent permission signaling or policy checks.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill is designed to perform real actions on a user's phone, including opening apps, searching contacts, and sending messages, but the description lacks a clear warning that these are live operations with privacy and financial consequences. In context, this is especially dangerous because ADB-based automation can affect messaging, payments, social apps, and personal data on an actual connected device.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The function pulls the full UI hierarchy from the device and stores it in a local XML file, which may contain sensitive text, labels, app structure, and on-screen metadata. In an agent skill that can be triggered by higher-level instructions, silent local persistence of this data increases privacy and data-handling risk, especially because temporary files are not cleaned up.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: This function captures the device screen and writes it to a local file without any notice, consent gate, or cleanup. Screenshots can contain messages, OTPs, financial data, personal photos, and other highly sensitive information, so silent persistence materially increases exposure in a phone-control skill.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.