Yyds.Auto

Control Android devices via MCP — tap, swipe, OCR, screenshot, UI automation, shell, file management, and AI agent orchestration for Android RPA.

This skill appears to be what it says (an Android RPA MCP client) but it grants powerful, sensitive capabilities on devices (root/shell access, IMEI and filesystem reads, app control). Before installing: 1) Verify the npm package publisher and inspect the package source (or install in a controlled environment) — npm packages can execute arbitrary code. 2) Only connect devices you trust and be aware that the skill can read device identifiers and files. 3) Prefer using a non-root device or limit device access if possible; do not connect production devices with sensitive data unless you fully trust the package. 4) When adding to editor/agent configs, avoid using npx -y if you want to prevent implicit network installs; install the package explicitly and pin a specific version. 5) If you need higher assurance, request the package's source repo or a signed release and audit the code before granting device access.

Type: OpenClaw Skill Name: yyds-auto Version: 1.0.0 The yyds-auto skill provides an extremely broad set of high-risk capabilities for controlling Android devices, including root shell access (run_shell), arbitrary Python code execution (run_python_code), and full file system access (read_file, write_file). While these tools are consistent with the stated purpose of Android RPA, they effectively turn the connected device into a remotely manageable target with minimal safeguards. The skill also includes features for installing APKs and managing Python environments, which could be leveraged for unauthorized persistence or data exfiltration if the AI agent is misdirected. (IOC: yydsauto.com, yyds-auto-mcp npm package).