Skip to content
Back to skills

Phone Harness

ASecurity

Control, inspect, test, or automate a physical Android phone connected to Murage over authorized USB debugging. Use for explicit Android, USB phone, ADB, mobile-app, tapping, typing, swiping, scrolling, screenshot, or phone-screen requests.

  • 10 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 20, 2026
developmentgobashdebuggingsecurity

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned September 20, 2026

npx -y skills add FerroxLabs/murage --skill phone-harness --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Phone Harness?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Phone Harness
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/ferroxlabs-phone-harness/badge)](https://www.skillsdirectory.com/skills/ferroxlabs-phone-harness)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: phone-harness
description: "Control, inspect, test, or automate a physical Android phone connected to Murage over authorized USB debugging. Use for explicit Android, USB phone, ADB, mobile-app, tapping, typing, swiping, scrolling, screenshot, or phone-screen requests."
---

# Phone Harness

Use the `phone` tools for every requested Android action. Never replace them
with Bash, raw `adb`, `subprocess`, an emulator, network ADB, or Tailscale.

1. Call `status` before the first action. If the device is missing or
   unauthorized, stop and relay the physical setup instruction.
2. Call `open_app` with the human app name. Do not scan the launcher first.
   Use `list_apps` only when the name is ambiguous.
3. Call `read_screen` before choosing a target and after every action. Prefer
   `tap_text`; use `screenshot` and pixel `tap` only when accessibility text
   cannot identify the target.
4. Use `swipe`, `type_text`, and `press` for interaction, verifying each step.

The tools operate the user's real phone. Navigate and read only what the task
needs. Stop before sending, posting, purchasing, booking, deleting, changing
settings, entering protected information, or accepting an unexpected legal or
security prompt unless the user has explicitly authorized that exact action.

Never enter passwords, payment details, government identifiers, or one-time
codes. Ask the user to complete protected-input steps directly on the phone.

Files in this skill

  • SKILL.md1.4 KB
  • agents/openai.yaml382 B
  • manifest.json379 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…