← Back to Skills Marketplace
Mobilerun
by
johnmalek312
· GitHub ↗
· v1.0.1
· MIT-0
282
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install mobile-run
Description
Control real Android phones through the Mobilerun API. Supports tapping, swiping, typing, taking screenshots, reading the UI accessibility tree, and managing...
Usage Guidance
This skill appears coherent and does what it says: it uses a single Mobilerun API key to control Android devices via the Mobilerun cloud. Before installing, consider:
- Trust & sensitivity: controlling a phone (screenshots, UI tree) can expose extremely sensitive personal data. Only enable this skill if you trust the Mobilerun service and the agent using the skill.
- API key handling: the skill expects a dr_sk_... key. Do not paste or share your key in chat; use the platform's secure credential storage and revoke the key from the Mobilerun dashboard if you stop using the skill.
- Webhooks & tasks: the platform supports webhooks and server-side tasks that can stream events; be careful when configuring webhook targets or running tasks that might send screenshots or UI data to external servers.
- Least privilege & billing: confirm the API key/account scope and billing plan (cloud devices and autonomous agent tasks may consume credits). Avoid granting more permissions than necessary.
If you want extra caution, require explicit user confirmation before the skill performs high-impact actions (installing apps, uninstalling, or running autonomous Tasks), or disable autonomous invocation for this skill if your agent platform allows that.
Capability Analysis
Type: OpenClaw Skill
Name: mobile-run
Version: 1.0.1
The skill bundle provides extensive remote control capabilities for Android devices, including screen capture, UI tree extraction, and input injection (tapping, typing, swiping) via the Mobilerun API (api.mobilerun.ai). While these high-risk functionalities are aligned with the stated purpose of mobile automation, they represent a significant security risk. The documentation in setup.md and api.md describes the use of a third-party APK (Droidrun Portal) requiring broad Accessibility permissions and mentions 'stealth mode' for bypassing bot detection. Although SKILL.md includes instructions to protect the API key and user privacy, the inherent risk of remote device access and screen monitoring warrants a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description (phone control) aligns with required items: a single Mobilerun API key and API calls to https://api.mobilerun.ai. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md and the included docs only instruct using the documented Mobilerun API endpoints (devices, screenshot, ui-state, tap, swipe, keyboard, tasks). It explicitly warns not to print the API key and not to share screenshots/UI trees with others. There is no guidance to read unrelated files, system credentials, or to send data to unexpected endpoints.
Install Mechanism
Instruction-only skill with no install spec and no code files to download or execute. This minimizes disk-writing and supply-chain risk.
Credentials
Only a single required environment variable (MOBILERUN_API_KEY) is declared and used; that is proportionate to the described API access. The docs explicitly instruct not to expose the key.
Persistence & Privilege
The skill is not forced always-on (always: false) and requests no special system privileges beyond using the supplied API key. Autonomous model invocation remains allowed by default but is not combined with other privileges that would increase concern.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mobile-run - After installation, invoke the skill by name or use
/mobile-run - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Prevent API key exposure in chat; prefer login flow for Portal setup
v1.0.0
Initial release of mobilerun skill.
- Control real Android devices remotely using the Mobilerun API.
- Supports actions like tapping, swiping, typing, screenshots, reading UI tree, and app management.
- Works with your own phone via the Droidrun Portal app or with a cloud device.
- Provides two automation methods: direct step-by-step control or using the Droidrun Agent for complex tasks.
- Includes clear instructions and error handling for device connectivity and account issues.
Metadata
Frequently Asked Questions
What is Mobilerun?
Control real Android phones through the Mobilerun API. Supports tapping, swiping, typing, taking screenshots, reading the UI accessibility tree, and managing... It is an AI Agent Skill for Claude Code / OpenClaw, with 282 downloads so far.
How do I install Mobilerun?
Run "/install mobile-run" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mobilerun free?
Yes, Mobilerun is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Mobilerun support?
Mobilerun is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mobilerun?
It is built and maintained by johnmalek312 (@johnmalek312); the current version is v1.0.1.
More Skills