This project enables PC-side control of a physical phone. Treat that capability as sensitive.
Recommended safeguards:
- Use a spare phone for long-running agent work.
- Disable USB debugging after each session.
- Do not authorize agents to open unrelated apps.
- Do not allow agents to handle payments, passwords, OTPs, private chats, or account settings without explicit action-time confirmation.
- Keep the phone visible while testing a new workflow.
Report security concerns through a private GitHub security advisory if available.