phonebase

SUSPICIOUS. The core phone-control capability matches the stated purpose, and the `pb` installer appears to be the vendor's official path, so this is not fundamentally deceptive. Risk comes from broad remote device control, arbitrary app/URL/APK actions, and especially transitive installation of additional skills that inherit agent trust.