Pywayne Adb Logcat Reader

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: adb-logcat-reader Version: 0.1.0 The skill bundle describes a legitimate utility for reading Android device logs using the `adb logcat` command. The `SKILL.md` provides clear documentation on its purpose and usage, including the mention of a Python backend utilizing `subprocess`, which is a necessary capability for its stated function. There is no evidence of prompt injection, malicious instructions, data exfiltration, or other harmful behaviors within the provided metadata and documentation files.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernMedium Confidence
ASI02: Tool Misuse and Exploitation
What this means

Stopping the reader could erase Android log data that the user expected to preserve for debugging or audit purposes.

Why it was flagged

The documented cleanup path appears to clear logs automatically, which is a destructive side effect that is not clearly scoped or separately confirmed for a reader tool.

Skill content
`stop()` terminates adb logcat; use `Ctrl+C` to send interrupt signal
- Logs are cleared automatically when process stops
Recommendation

Use only when automatic log clearing is acceptable; otherwise confirm the module behavior first or use a logcat workflow that does not clear logs.

What this means

The skill can interact with adb and stream logs from an attached Android device.

Why it was flagged

The skill starts a local adb/logcat process, which is expected for its purpose but still means the agent may run local commands against a connected device.

Skill content
via the `adb logcat` command ... Uses Python subprocess to call adb
Recommendation

Run it only with trusted devices and expected adb access, and stop the process when monitoring is complete.

What this means

Users must trust whatever external package or native component provides the actual log reader.

Why it was flagged

The reviewed artifact does not include the external pywayne module or native backend implementation, so their provenance and behavior cannot be verified from this skill package.

Skill content
from pywayne.adb.logcat_reader import AdbLogcatReader ... C++ Backend (Default) ... Uses native C++ implementation
Recommendation

Install the dependency only from a trusted source, verify the version, and prefer reviewed or pinned packages where possible.

What this means

Private device information could be displayed, copied into the conversation, or stored if the user or agent saves the output.

Why it was flagged

The skill streams Android log lines into the agent/user environment; those logs may contain sensitive or untrusted application and system data.

Skill content
for line in reader.read():
    print(line) ... # Filter, parse, store...
Recommendation

Filter and redact logs before sharing or storing them, and treat log contents as data rather than instructions.