← 返回 Skills 市场
226
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install mobilerun-official
功能描述
Give your OpenClaw agent hands on a real Android phone. Tap, swipe, type, take screenshots, read the UI accessibility tree, and manage apps — all through the...
安全使用建议
What to consider before installing or using this skill:
- The skill legitimately needs your Mobilerun API key (MOBILERUN_API_KEY). Do not paste unrelated secrets. Prefer to store the key in OpenClaw's secure config rather than pasting it into chat.
- The setup instructs you to install a Portal APK on your Android phone and enable Accessibility permissions. That Portal app will be able to read screen contents and interact with apps; only install it if you trust Mobilerun and understand the risk.
- Despite the SKILL.md claim 'No data leaves your control,' the platform supports cloud devices, task execution, screenshots/UI state streaming, webhooks, and VPN routing — these features send device data to mobilerun.ai (and optionally to webhook URLs). If you must keep data local, restrict use to your personal device and avoid cloud/task features.
- The docs are otherwise coherent with the stated purpose, but ambiguous phrasing (e.g., about providing the API key) should be clarified. If you proceed: (1) use a dedicated API key you can revoke, (2) test with non-sensitive data, and (3) revoke the key immediately if anything unexpected happens.
- If you need higher assurance, ask the skill author for proof of the Mobilerun service identity (official homepage) and a privacy/security policy describing how screenshots and UI data are stored and retained.
功能分析
Type: OpenClaw Skill
Name: mobilerun-official
Version: 1.2.0
The skill bundle provides a legitimate integration for controlling Android devices via the Mobilerun API (api.mobilerun.ai). It contains standard API documentation for device automation (tap, swipe, screenshots) and instructions for the AI agent to verify environment variables and device states before prompting the user. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the high-privilege access to mobile devices is the stated and transparent purpose of the skill.
能力评估
Purpose & Capability
Name, description, and the API endpoints in the docs all align: controlling Android devices (tap, swipe, screenshot, UI tree, app management). The single declared primary credential (MOBILERUN_API_KEY) is appropriate for the described API-based functionality.
Instruction Scope
Runtime instructions are mostly scoped to calling the Mobilerun API (GET /devices, screenshots, ui-state, tap/swipe, etc.), which is appropriate. However the top-level SKILL.md claim 'No data leaves your control' contradicts other documents that describe cloud devices, task execution, screenshot/UI state endpoints, streaming (SSE), webhooks, and VPN routing — these features necessarily transmit device data to mobilerun.ai and (if used) to webhook endpoints. setup.md also instructs users to install a Portal APK and enable Android Accessibility permissions (highly sensitive). There's one ambiguous line ('The agent should provide the API key to the user at step 2') that could be misinterpreted as the agent revealing or exfiltrating keys; the intended meaning is likely that the agent should instruct the user how to paste their key into the Portal app, but it should be clarified. Overall the instructions are powerful (can read screenshots and accessibility tree) and include operations that expose sensitive UI contents to the Mobilerun service when cloud features or tasks are used.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest disk/execution risk on the agent host. However the setup workflow requires the user to install a Portal APK on their Android device (droidrun.ai -> GitHub release) which is outside the agent host and raises mobile-side risk; this is expected for the feature but should be highlighted to users.
Credentials
Only one credential is declared (MOBILERUN_API_KEY), which is proportional to the API-driven purpose. The skill will prompt for or require this key. Users should avoid pasting other unrelated secrets. Note: the Portal APK flow asks the user to paste the same API key into the phone app, and enabling Accessibility grants the Portal app broad view/interact permissions on the device—this is functionally required but high-privilege.
Persistence & Privilege
No special persistence flags (always: false), no install-time scripts, and no modifications to other skills are present. The skill can be invoked autonomously by the agent (default), which is normal; combine that with the sensitive device-control surface only if you trust the skill and the API.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mobilerun-official - 安装完成后，直接呼叫该 Skill 的名称或使用
/mobilerun-official触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.0
Security scan fixes: removed hardcoded LLM model names (use GET /models endpoint instead), removed publishedAt timestamp from meta, added security context for Accessibility Service permission. All security vendors: Undetected.
v1.1.0
Fix: resolved metadata name/slug mismatch. Removed config-write instructions — API key now exclusively via MOBILERUN_API_KEY env var (no agent config writes).
v1.0.0
Official Mobilerun skill by the Droidrun team. Control real Android phones through the Mobilerun API — tap, swipe, type, screenshot, UI tree. All credentials via MOBILERUN_API_KEY env var, no data leaves your control.
元数据
常见问题
Mobilerun 是什么？
Give your OpenClaw agent hands on a real Android phone. Tap, swipe, type, take screenshots, read the UI accessibility tree, and manage apps — all through the... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 226 次。
如何安装 Mobilerun？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mobilerun-official」即可一键安装，无需额外配置。
Mobilerun 是免费的吗？
是的，Mobilerun 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Mobilerun 支持哪些平台？
Mobilerun 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mobilerun？
由 PeLae1（@pelae1）开发并维护，当前版本 v1.2.0。
推荐 Skills