← 返回 Skills 市场
106
总下载
4
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mobizen-gui
功能描述
Helps users set up and run MobiZen-GUI to perform mobile-use tasks — automating Android phone operations via natural language. Use when the user wants to con...
安全使用建议
This skill appears to be what it claims (a MobiZen-GUI setup guide) but contains several privacy and code-execution risks you should consider before proceeding:
- Be careful sharing API keys: the agent expects an api_key/base_url/model_name and will send screenshots and prompts to whichever endpoint you provide. Use a limited-scope or throwaway key, or prefer a local model (Ollama) if you must avoid cloud exposure.
- Screenshots and device content may contain sensitive data (messages, passwords, notifications). Assume they could be transmitted off-device; disable or mask sensitive apps before testing.
- The guide instructs downloading third-party models and running vLLM with --trust-remote-code. That can execute arbitrary code from model packages — only download and run models from sources you trust, and inspect code when possible.
- There is no registry-declared credential field — the config-based API key requirement is only in SKILL.md. Treat that as a manual consent point: do not paste high-privilege keys into the config without understanding where requests go.
- Review the cloned repository and requirements.txt before running pip install. Consider running in an isolated environment (VM/container) and revoke keys when finished.
If you want, I can: (a) highlight exactly where screenshots are created/sent in the MobiZen-GUI repo, (b) produce safe example config values for using a local model, or (c) draft a short checklist to minimize exposure when testing this tool.
功能分析
Type: OpenClaw Skill
Name: mobizen-gui
Version: 1.0.0
The mobizen-gui skill provides instructions for an AI agent to assist users in setting up an Android automation framework. It guides the user through installing ADB, cloning the official Alibaba MobiZen-GUI repository, and configuring API credentials locally. All requested actions, including shell commands and configuration file management, are directly aligned with the tool's stated purpose of mobile device automation and do not exhibit signs of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The SKILL.md content matches the stated purpose (setting up and running MobiZen-GUI to automate Android devices). Recommended actions (adb, install ADBKeyboard, clone GitHub repo, pip install requirements, supply model API info) are expected. Minor metadata mismatch: registry lists no required credentials or env vars, but the runtime instructions explicitly require an API key/base_url/model_name to send prompts to a model endpoint (stored in my_config.yaml).
Instruction Scope
Runtime instructions direct taking screenshots, building prompts that include screenshots, and sending them to whatever model endpoint you configure (OpenAI or third-party). They also instruct the agent to ask the user for an API key and write it into my_config.yaml. This is within the skill's purpose but has clear privacy/exfiltration implications: device screenshots and actions may be transmitted to external services not under your control. The docs also include development-level steps (custom message builders, model client classes) that reference transforming images into data URLs — again implying sending image data to a model.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to pip install packages, clone a GitHub repo, download models from HuggingFace/ModelScope, and run vLLM with --trust-remote-code. Downloading third-party models and using --trust-remote-code can execute arbitrary code from model packages; model downloads from non-official mirrors or ModelScope increase risk. These are reasonable for running local models but represent a higher-risk install/runtime surface that the user must review/trust.
Credentials
The skill asks the user to provide model credentials (api_key, base_url, model_name) and to store them in a config file, but the registry metadata declared no required credentials. Requesting an API key is proportionate to the feature (remote model calls), but it increases risk because captured screenshots and phone interactions will be sent to that endpoint. The guidance suggests various providers (OpenAI, third-party, or local Ollama) — choose carefully and avoid giving long-lived/high-privilege keys to untrusted endpoints.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide privileges. It writes/uses a local config file (my_config.yaml) and works with adb devices — expected for mobile automation. There is no attempt to modify other skills or system-wide agent settings in the provided instructions.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install mobizen-gui - 安装完成后,直接呼叫该 Skill 的名称或使用
/mobizen-gui触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of mobizen-gui skill.
- Guides users in setting up and running MobiZen-GUI for automating Android phone tasks via natural language.
- Provides step-by-step setup for ADB, device connection, and MobiZen-GUI installation.
- Supports quick configuration with any OpenAI-compatible API.
- Includes advanced instructions for deploying the MobiZen-GUI-4B model locally.
- Explains customization options for prompts, model clients, and action parsers.
元数据
常见问题
mobizen-gui 是什么?
Helps users set up and run MobiZen-GUI to perform mobile-use tasks — automating Android phone operations via natural language. Use when the user wants to con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 106 次。
如何安装 mobizen-gui?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mobizen-gui」即可一键安装,无需额外配置。
mobizen-gui 是免费的吗?
是的,mobizen-gui 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
mobizen-gui 支持哪些平台?
mobizen-gui 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 mobizen-gui?
由 xjx0524(@xjx0524)开发并维护,当前版本 v1.0.0。
推荐 Skills