Security audit
Security checks for vulnerabilities and agentic risk
This is a clearly disclosed Android device-control skill, but users should treat screenshots, input control, WiFi debugging, and adb shell access as sensitive.
Install only if you intend to let an agent view and operate an Android device. Prefer a test device or emulator, avoid screens with private data, and require explicit approval before shell commands that change settings, apps, files, accounts, or network/debugging state.
The skill can capture screenshots, inspect on-screen content, send input, launch apps, and control a real Android device, but the description does not warn about privacy and safety implications. In practice this can expose sensitive information visible on screen or allow unintended interactions with personal or production devices, especially when used by autonomous agents.
The skill exposes an another_shell capability that can run arbitrary adb shell commands on a connected Android device, but the skill description and guidance do not warn users about the power and risk of this feature. This can enable device reconfiguration, data access, app manipulation, or destructive actions if invoked carelessly or via prompt injection, and the omission makes misuse more likely in an agentic context.
No suspicious patterns detected.
