← 返回 Skills 市场
513
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install phone-agent-skill
功能描述
Use AI AutoGLM Phone Agent for automated mobile device control. Suitable for tasks requiring mobile phone automation, such as APP automated testing, data col...
安全使用建议
This skill appears to do what it says (drive an Android device through a local AutoGLM Phone Agent), but its registry metadata omits important runtime requirements. Before installing or invoking it:
- Treat it as able to perform ANY UI action on a connected device. Use only test devices/accounts and never a personal device with sensitive data.
- The SKILL.md expects adb in PATH and an env var PHONE_AGENT_ENDPOINT pointing at a locally running Phone Agent service—ask the publisher to add these to the declared requirements, or set them manually in a controlled environment.
- Verify the AutoGLM Phone Agent SDK you install is from a trusted source (the README points to https://github.com/zai-org/Open-AutoGLM; confirm repository authenticity and review its code).
- Run the SDK and test commands manually (adb devices, curl the endpoint) before letting the agent invoke the skill autonomously.
- Be careful granting overlay/accessibility permissions on devices; those permissions allow broad UI control and can be abused.
If the publisher cannot or will not update the metadata to list required binaries and the PHONE_AGENT_ENDPOINT env var, treat the omission as a red flag and prefer manual, sandboxed testing only.
功能分析
Type: OpenClaw Skill
Name: phone-agent-skill
Version: 1.0.0
The skill provides extensive control over an Android device (tap, type, swipe, launch apps, screenshots, read UI text) via a user-configured `PHONE_AGENT_ENDPOINT`. While the `SKILL.md` instructions themselves do not contain explicit malicious commands or prompt injection attempts, the inherent capability for automated mobile device control is high-risk. The reliance on a user-defined local endpoint (`PHONE_AGENT_ENDPOINT`) could become a vulnerability if misconfigured to point to a malicious external service or if the local service itself is compromised, allowing potential unauthorized actions or data exfiltration through the agent's capabilities.
能力评估
Purpose & Capability
The SKILL.md describes legitimate mobile automation capabilities (tap, swipe, screenshots) consistent with the stated purpose. However, the registry metadata declares no required binaries or env vars while the instructions explicitly require adb in PATH, the AutoGLM Phone Agent SDK, and an endpoint exposure (PHONE_AGENT_ENDPOINT). The mismatch between declared requirements and actual runtime needs is a material incoherence.
Instruction Scope
The instructions stay inside the stated domain: they direct the agent to interact with an AutoGLM Phone Agent backend and an Android device via adb and the SDK. They do not instruct the agent to read unrelated host files or secrets. They do, however, require the agent to be able to reach a local HTTP service and to perform real UI actions on a connected device, which is expected for this skill but carries device-level risk.
Install Mechanism
This is an instruction-only skill with no install spec or code files, which reduces filesystem/install risk. The SKILL.md references installing an external SDK and running its agent, but the skill itself does not pull or install code — the user/administrator must install the SDK separately.
Credentials
The runtime instructions require environment configuration (PHONE_AGENT_ENDPOINT) and adb availability, but these are not declared in the skill metadata (requires.env and required binaries are empty). While the skill does not request cloud credentials or secrets, it does ask the operator to grant overlay/accessibility permissions on devices — appropriate for automation but sensitive. The missing declarations reduce transparency about what the skill will need access to.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. Model invocation is allowed (default), which is normal for skills that perform actions; combined with the ability to control a device this increases blast radius but is expected for an automation skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install phone-agent-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/phone-agent-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of AutoGLM Phone Agent skill.
- Enables natural language control of Android devices via the AutoGLM Phone Agent SDK.
- Supports actions such as tapping, swiping, typing, launching apps, taking screenshots, and reading UI text.
- Includes detailed prerequisite, setup, and usage instructions.
- Provides troubleshooting guidance and safety best practices.
- Designed for mobile automation tasks like app testing, UI interaction, and data collection.
元数据
常见问题
Phone agent 是什么？
Use AI AutoGLM Phone Agent for automated mobile device control. Suitable for tasks requiring mobile phone automation, such as APP automated testing, data col... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 513 次。
如何安装 Phone agent？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install phone-agent-skill」即可一键安装，无需额外配置。
Phone agent 是免费的吗？
是的，Phone agent 完全免费（开源免费），可自由下载、安装和使用。
Phone agent 支持哪些平台？
Phone agent 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Phone agent？
由 gaojizhou（@gaojizhou）开发并维护，当前版本 v1.0.0。
推荐 Skills