Install
$ agentstack add skill-aivanelabs-ai-rpa-agent-android ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Android REPL
Use this skill to drive an Android device through the public agent-android beta surface published in the aivanelabs/ai-rpa repo.
Runtime prerequisites:
agent-androidis available onPATH- if it is missing, install the CLI with
uv tool install aivane-agent-android; then runuv tool update-shellif the command is still not found - the user has provided a trusted device URL such as
http://:8080; use the phone-side configured port if it is not8080
The public path is local-first:
- the phone hosts the lightweight HTTP service locally
- the desktop connects directly to the phone URL, usually
http://:8080 - UI reads, taps, inputs, and screenshots stay on the phone and controlling machine
- the current tradeoff is LAN-only control; an optional server-side or relay path may arrive later
If an agent-android command suddenly stops working, first check whether the AIVane app or its local API service has exited on the phone.
Safety Boundaries
- Connect only to a device URL explicitly provided by the user.
- Do not scan local networks or guess device IP addresses.
- Treat UI trees and screenshots as sensitive because they may contain private app content.
- Save screenshots or raw UI dumps only when the user explicitly asks for a file output.
- Ask for confirmation before operating sensitive apps, private content, account settings, or irreversible actions.
- Do not expose the phone-side service on a public network.
Core Workflow
Every Android control task should follow the same short loop:
- Confirm connectivity with
/health - Discover the target app with
appsif needed - Launch one app
- Inspect the current UI tree
- Perform one action
- Inspect again
Keep the loop short. Prefer inspect -> act -> inspect over long speculative command chains.
Quick Start
Start the REPL with the user-provided device URL:
agent-android --repl --url http://:8080
Built-in help:
agent-android --help- In the REPL:
h
Essential CLI Commands
Use the one-off CLI when you already know the exact action you want.
Connectivity:
agent-android --health --url http://:8080
Discovery:
agent-android --apps --url http://:8080agent-android --list --url http://:8080agent-android --id com.example:id/search --url http://:8080agent-android --text Search --url http://:8080agent-android --inputs --url http://:8080agent-android --refId 7 --url http://:8080agent-android --xpath 7 --url http://:8080agent-android --get-attr 7 text --url http://:8080
Actions:
agent-android --launch com.xingin.xhs --url http://:8080agent-android --tap 7 --url http://:8080agent-android --input 7 "hello world" --url http://:8080agent-android --swipe up --url http://:8080agent-android --swipe up --swipe-refid 7 --url http://:8080agent-android --swipe up --swipe-xpath "//RecyclerView[1]" --url http://:8080agent-android --back --url http://:8080agent-android --press home --url http://:8080agent-android --screenshot --url http://:8080agent-android --application-bundle app.zip --main-template-file __main__.json --url http://:8080agent-android --template template.json --async --url http://:8080agent-android --application-bundle app.zip --main-template-file __main__.json --async --url http://:8080agent-android --upload foo.json --remote-path Templates/foo.json --url http://:8080
Waiting and output:
agent-android --wait-for Search --timeout 30 --url http://:8080agent-android --list --raw --url http://:8080agent-android --tasks --url http://:8080agent-android --task TASK_ID --url http://:8080agent-android --task-logs TASK_ID --url http://:8080agent-android --stop-task TASK_ID --url http://:8080
REPL Command Reference
Use the REPL for exploratory tasks and smoke runs. Short aliases and long names both work.
Browse
healthorhl
Check /health.
l [n]orlist [n]
List the first n elements, or all cached elements when n is omitted.
ssorsnapshot
Force-refresh the UI tree and print it again.
forfind
Filter by text or content description.
id
Filter by Android resource ID.
ref
Show the full element detail for one refId.
xorxpath
Generate XPath candidates and validate their runtime match counts.
xx
Tap by the best unique generated XPath candidate. Refuses ambiguous matches.
vx [idx]orvalidatex [idx]
Validate one XPath against the runtime. Optionally inspect one match by zero-based index.
Interact
tortap
Tap the element center point from the current tree.
txortapx
Tap one runtime-resolved XPath target.
iorinput
Input text into a refId target. Use --clear or "" to clear instead of typing.
ixorinputx
Input text into one XPath target. Use ix -- or --clear to clear the field.
sw [refId] [--dur N] [--dist N]orswipe ...
Swipe down/up/left/right across the screen, or inside a refId target when provided.
swx [--dur N] [--dist N]orswipex ...
Swipe inside one XPath target.
porpress ...
Press a system key.
borback
Press Back.
laorlaunch
Launch an app by package name.
s [path]orscreenshot [path]
Capture a screenshot to an auto-generated or explicit path.
uporupload
Upload a local file to the phone. Overwrites by default; add --no-overwrite to reject an existing target.
Wait And Inspect
wf [--t N]orwaitfor ...
Wait for an element to appear.
gorget
Read an attribute such as text, class, bounds, x, y, or xpath.
apps
List launcher apps from /apps.
Session
raw
Toggle raw JSON mode.
vars
Show current URL, timeout, raw mode, and tree cache state.
set timeout 30
Set the default wait timeout in seconds.
horhelp
Show the built-in help text.
qorquit
Exit the REPL.
Common Patterns
First smoke flow
- Start the REPL with
agent-android --repl --url http://:8080. healthappslalti hellobs
Find the right package before launch
appsla com.example.appl
Inspect an element before using XPath
lref 12x 12vx //EditText[@text='Search']
Clear and refill an input
i 7 --cleari 7 hello worldix //EditText[@text='Search'] --ix //EditText[@text='Search'] -- hello world
Run a local template bundle
- Zip the local folder containing the main template and child templates.
- Run
agent-android --application-bundle app.zip --main-template-file __main__.json --url http://:8080. - Use
--uploadonly for standalone images, ordinary binary files, or one-off file sync.
Troubleshooting
- If an
agent-androidcommand fails, first check whether the AIVane app or phone-side API service has exited. - If
agent-androidis not found, runuv tool update-shell, reopen the terminal, and retry. - Re-open the app or restart the phone-side service, then retry
curl http://:8080/health. - If
healthworks but UI commands fail, runssto force-refresh the tree before tapping or inputting. - If
txorixfails, runvxand make sure the XPath resolves to exactly one runtime match. - If screenshots fail the first time, confirm the on-device MediaProjection permission prompt was accepted.
- If everything suddenly stops responding, confirm the phone IP did not change and that the desktop is still on the same LAN.
When To Stop
Stop and ask for user help when:
- the device is unreachable on LAN
- the app is not running and cannot be restarted from the current path
- required Android permissions are missing
- launcher discovery returns nothing useful
- the runtime UI no longer matches the expected screen after repeated refreshes
References
- Smoke checklist: GitHub
- Quickstart: GitHub
- Install guide: GitHub
- Public protocol: GitHub
- Known beta limits: GitHub
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: aivanelabs
- Source: aivanelabs/ai-rpa
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.