Byted Ai Mobileuse Agent
v1.1.0Executes mobile automation tasks on Volcengine Cloud Phone using natural language commands, returning run IDs and progress in JSONL format.
⭐ 0· 30·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to run Mobile Use Agent tasks on Volcengine Cloud Phone and the scripts call Volcengine OpenAPI actions (RunAgentTaskOneStep, ListAgentRunCurrentStep, GetAgentResult, CancelTask) using volcenginesdkcore. Required inputs (AccessKey/SecretKey, product_id, pod_id, prompt, thread_id) match the described functionality.
Instruction Scope
SKILL.md instructs the agent to run the included Python scripts with explicit CLI arguments; the scripts only call Volcengine APIs and read the packaged reference docs (console_help reads a local references/MUA_Agent_Instructions.md). There are no instructions to read arbitrary host files, credentials for other services, or to transmit data to endpoints outside Volcengine.
Install Mechanism
No install spec is declared (instruction-only skill), and the only dependency is volcengine-python-sdk (references/requirements.txt). That dependency is appropriate and expected for calling Volcengine APIs; nothing is downloaded from unknown URLs and no archives are extracted.
Credentials
The scripts require Volcengine AccessKey/SecretKey (passed as CLI args) which is proportional. Note: sdk_client.py will also accept VOLC_ACCESSKEY, VOLC_SECRETKEY, VOLC_HOST and VOLC_REGION from the environment as a fallback — SKILL.md documents CLI args but does not explicitly call out these optional env vars. This is a minor inconsistency (fallback to env vars can cause the skill to use existing environment credentials if present).
Persistence & Privilege
The skill does not request persistent/always-on inclusion and has no install step that modifies agent/system configuration. It runs as an explicit script invoked with credentials; default autonomous invocation settings are unchanged but present (normal platform behavior).
Assessment
This skill appears to do exactly what it says: start and poll Volcengine Cloud Phone agent runs. Before installing or running it, ensure you: (1) only provide Volcengine AccessKey/SecretKey with the minimum privileges needed (prefer a test account or scoped key), (2) understand that the scripts will call Volcengine APIs and may use VOLC_ACCESSKEY/VOLC_SECRETKEY environment variables if present (remove or isolate env creds if you don't want that), (3) review the volcengine-python-sdk dependency and run in a controlled environment, and (4) if you allow autonomous invocation for this skill, be aware it can make API calls using whatever credentials you supply — avoid supplying long-lived production keys unless you trust the skill and its runtime environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97564sawwtc99508kv6nv6ht984cs6c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.