Mobilerun

Control real Android phones through the Mobilerun API. Supports tapping, swiping, typing, taking screenshots, reading the UI accessibility tree, and managing...

This skill appears internally consistent with its purpose. Before installing, note: (1) the MOBILERUN_API_KEY grants programmatic control of devices on the associated Mobilerun account — treat it like a password and do not paste it into chat; (2) screenshots and the UI tree can contain sensitive personal data, and the skill's docs explicitly warn not to transmit them beyond the user — follow that guidance; (3) enabling Android Accessibility and installing the Portal APK are required for controlling a personal phone and are powerful permissions — only install the Portal APK from the official source (the doc points to a GitHub releases page) and ensure you trust the Mobilerun service; and (4) using cloud/device tasks may incur billing/credits per the subscription doc. If you want extra caution, only allow user-invoked runs (avoid persistent automation) and avoid sending sensitive inputs (passwords, 2FA codes) through screenshots or the UI tree.

Type: OpenClaw Skill Name: mobilerun-skill Version: 1.0.0 The skill provides extensive remote control over Android devices, including screen capture, UI inspection, and input injection via the Mobilerun API. It includes high-risk capabilities such as installing applications from a custom 'app library' rather than the official Play Store (phone-api.md) and requires users to side-load an APK with broad Accessibility permissions (setup.md). While these features are aligned with the stated purpose of mobile automation and the instructions include privacy safeguards, the inherent risks of remote device access and side-loading qualify it as suspicious under the provided criteria.