DevLab MCP Suite
UnverifiedREPOtanguito86/devlab-mcp
F
Catalogue entry updated 4 days ago
Auth postureNot probedno remote endpoint probed yet
Tools713 Destructive · 34 Execute · 6 Write · 28 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 3Execute 34Write 6Read 28
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 71
android_clear_app_dataandroid_clear_logcatandroid_uninstall_appandroid_force_stop_appandroid_input_text
View all 71 tools
android_install_apkandroid_launch_appandroid_open_app_settingsandroid_run_shellandroid_run_workflowandroid_send_debug_intentandroid_send_intentandroid_set_bluetoothandroid_set_volumeandroid_start_activityandroid_stop_sessionandroid_swipeandroid_tapandroid_tap_resourceandroid_tap_textandroid_tap_uiandroid_wait_for_uibrowser_clickbrowser_click_percentbrowser_click_textbrowser_evaluate_game_statebrowser_evaluate_jsbrowser_openbrowser_open_urlbrowser_press_keybrowser_run_workflowbrowser_start_sessionbrowser_stop_sessionbrowser_type_textbrowser_waitbrowser_wait_for_canvas_changebrowser_wait_for_selectorandroid_manage_permissionsandroid_record_videoandroid_session_stepandroid_start_sessionbrowser_closevisual_create_baselineadb_devicesandroid_app_infoandroid_capture_stateandroid_current_appandroid_device_infoandroid_find_uiandroid_generate_reportandroid_get_session_reportandroid_list_appsandroid_list_packagesandroid_list_sessionsandroid_list_workflowsandroid_read_logcatandroid_screenshotandroid_ui_dumpbrowser_capture_fpsbrowser_get_console_logsbrowser_get_page_errorsbrowser_get_session_reportbrowser_list_profilesbrowser_list_sessionsbrowser_list_workflowsbrowser_record_tracebrowser_screenshotbrowser_screenshot_canvasvisual_compare_foldervisual_compare_imagesvisual_generate_report
Change history
No changes recorded since first scan. Watched servers surface a diff within the hour.
Recommended policy
android_clear_app_datadeny
android_force_stop_apprequire approval
android_manage_permissionsrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →