📦 android-auto-controller — 安卓自动操控
v1.0.1无需 root 即可远程接管 Android 手机：AI 视觉实时读懂屏幕，自动拦截弹窗干扰，精准模拟人手点击滑动；内置反幻觉校验与防绕过策略，一切操作以真实屏幕反馈为唯一依据，稳定可靠。
1· 162·0 当前·0 累计
by 下载技能包
最后更新
2026/3/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
What to consider before installing:
- Privacy: The script takes full screenshots and sends them (base64) to the configured VLM endpoint. Only use this if you fully trust the model provider and the network path; avoid using with devices containing private/financial/personal data. Prefer a locally-hosted VLM (VLM_BASE_URL pointing to localhost) when possible.
- Secrets storage: The guide suggests storing VLM_API_KEY in ~/.openclaw/config.json. That file will contain a long-lived secret—make sure y...详细分析 ▾
✓ 用途与能力
Name/description (Android visual automation) align with required binaries (python3), the declared VLM environment variables, and the included python script that uses uiautomator2 and an OpenAI-compatible client to send screenshots to a VLM. Required pieces are coherent for the stated goal.
ℹ 指令范围
SKILL.md confines the agent to run the provided script and documents required setup (USB debugging, pip install uiautomator2/openai, python -m uiautomator2 init). That is in-scope. However, the runtime instructions and the included script both send full screenshots (base64) to the VLM endpoint — this transmits potentially sensitive screen content off the machine. Also SKILL.md contains a detected prompt-injection signal (unicode-control-chars) which may attempt to influence agent behavior or evaluations; this should be reviewed.
✓ 安装机制
The skill is instruction-first and includes a local Python script; there is no network install, package download, or archive extraction in the manifest. The user is instructed to pip-install uiautomator2 and openai themselves, which is standard but external package installation risk remains under user control.
⚠ 凭证需求
Required env vars (VLM_API_KEY, VLM_BASE_URL, VLM_MODEL_NAME, VLM_COORD_SCALE) match the VLM-based design — they are necessary. But they are high-sensitivity: VLM_API_KEY and VLM_BASE_URL grant whatever remote service can do with full-device screenshots. The SKILL.md asks the user to store the key in ~/.openclaw/config.json (persistent storage of a secret). Ensure you trust the VLM endpoint and secure that config file. No unrelated credentials are requested.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request system-wide or other-skills configuration access. It does instruct enabling itself in ~/.openclaw/config.json (normal for a user-enabled skill) but does not demand forced or permanent inclusion.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/20
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install android-auto-controller
镜像加速npx clawhub@latest install android-auto-controller --registry https://cn.longxiaskill.com