pokeclaw-android-ai-agent

SUSPICIOUS. The skill is coherent and not clearly malicious, but it enables high-impact autonomous phone control: reading screen contents, monitoring notifications, launching apps, and sending messages. Install sources are mostly plausible, yet the combination of broad Android privileges, autonomous messaging, optional cloud routing of sensitive content, and LLM-driven action loops makes the overall security risk high despite good purpose alignment.