← Back to Skills Marketplace
noah-smith-max

android build tool

by noah-smith-max · GitHub ↗ · v0.0.2
cross-platform ⚠ suspicious
375
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install android-build
Description
A tool for downloading and configuring Android SDKs for projects, supporting Windows and macOS. Invoke when user needs to manage mobile SDKs, configure proje...
README (SKILL.md)

Pi Project

A tool for downloading and configuring Android SDKs for projects, supporting Windows and macOS.

Features

Environment Detection

  • Project detection
  • Proxy detection (Use proxy for chinese network if proxy detected)

Dependency Detection

Detect version information for:

  • Flutter
  • Android ecosystem (Gradle, Build Tools, SDK, NDK, cmake)
  • JAVA

Check & Download

  • Check if dependencies are installed
  • Download missing dependencies

Environment Config

  • Configure environment variables for the project to be used by code editors
  • Configure necessary global environment variables
  • For SDKs with strict version sensitivity (e.g., Flutter), configure shortcut commands in the project root directory

Build

  • Build the project from source code

Usage

Using pi_claw.py (Recommended)

  • Run python pi_claw.py help to show help information
  • Run python pi_claw.py detect /path/to/your/project to detect project dependencies
  • Run python pi_claw.py /path/to/your/project to download SDK and configure project
  • Run python pi_claw.py build /path/to/your/project to build the project from source code

Using pi directly

  • Run pi help to show help information
  • Run pi detect /path/to/your/project to detect project dependencies
  • Run pi /path/to/your/project to download SDK and configure project
  • Run pi build /path/to/your/project to build the project from source code \x3Cimg width="1550" height="1262" alt="Image" src="https://github.com/user-attachments/assets/1f39cd73-5f2a-484f-9351-05d5c43459c9" />

Supported Platforms

  • Windows
  • macOS

Supported Project Types

  • Android projects
  • Flutter + Android projects

Download

Usage Guidance
This skill works by downloading and executing a helper binary (pi.exe/pi) from a GitHub Releases URL at runtime. That makes its behavior dependent on whatever code is in that remote binary — which is not included or verified. Before installing or running it: 1) Review the upstream release page and vendor identity (who controls noah-smith-max/pi_public) and confirm you trust that source. 2) Ask the skill author for checksums/signatures or for the helper's source code so you can verify what will run. 3) Avoid running it on production or sensitive systems; test in an isolated VM or disposable environment. 4) Prefer a version that includes integrity verification (SHA256/GPG) or a pure-Python implementation instead of executing an unsigned binary. 5) Note the script only supports Windows/macOS (it exits on Linux). If you accept the risk, consider improving the wrapper (use subprocess.run with argument lists to avoid shell-joining, validate TLS/release integrity, and pin a specific release).
Capability Analysis
Type: OpenClaw Skill Name: android-build Version: 0.0.2 The `pi_claw.py` script is highly suspicious due to a critical shell injection vulnerability. It uses `os.system(' '.join(args))` where `args` includes unsanitized user input (`sys.argv[1:]`), allowing for arbitrary command execution if a malicious string is passed as an argument. Additionally, the script downloads and executes an external, unverified binary (`pi` or `pi.exe`) from a GitHub release URL (e.g., `https://github.com/noah-smith-max/pi_public/releases/download/r0.0.1/pi.exe`), introducing a significant supply chain risk by running code from an external source without validation. While the `SKILL.md` does not contain malicious prompt injection, the underlying Python script presents severe security flaws.
Capability Assessment
ℹ Purpose & Capability
The name/description (Android SDK management) match the included Python wrapper which downloads and runs a helper 'pi' binary to perform tasks. Requesting a helper executable is plausible for this purpose, so the overall capability aligns with the stated purpose.
⚠ Instruction Scope
The runtime instructions (run pi_claw.py) cause the skill to download an external binary and execute it. While this is related to the stated task, the instructions grant the skill authority to fetch and run arbitrary remote code (the contents of the 'pi' binary are not included), which expands scope beyond what a pure instruction-only skill typically does.
⚠ Install Mechanism
The Python script downloads an executable from GitHub Releases and executes it. Although GitHub releases is a known host, there is no checksum/signature verification, no pinned release artifact, and the binary is executed immediately. Download+extract/execute of remote binaries without integrity checks is a high-risk install pattern.
✓ Credentials
The skill declares no required environment variables, credentials, or config paths and the code does not read any secrets. The requested environment access is minimal and proportionate to the task as described.
ℹ Persistence & Privilege
The script writes the downloaded 'pi' binary into the same directory as pi_claw.py and executes it. This is a local write and not a platform-wide persistence request (always:false). Still, writing and running an executable on disk increases attack surface and should be considered before use.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install android-build
  3. After installation, invoke the skill by name or use /android-build
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.0.2
support flutter-android, mac and windows.
Metadata
Slug android-build
Version 0.0.2
License —
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is android build tool?

A tool for downloading and configuring Android SDKs for projects, supporting Windows and macOS. Invoke when user needs to manage mobile SDKs, configure proje... It is an AI Agent Skill for Claude Code / OpenClaw, with 375 downloads so far.

How do I install android build tool?

Run "/install android-build" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is android build tool free?

Yes, android build tool is completely free (open-source). You can download, install and use it at no cost.

Which platforms does android build tool support?

android build tool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created android build tool?

It is built and maintained by noah-smith-max (@noah-smith-max); the current version is v0.0.2.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments