Open Source Radar — November 8: An Android Agent That Uses Your Apps
Today's board is agents on the move again — one that tapped into your phone's own apps, one that keeps coding after you close the terminal, one that reads a video frame by frame, and one built to make the first kind expensive to point at your binary.
Mika (Kotlin, about 7,700 stars, Apache-2.0) puts the agent on the phone itself: wangzan101/Mika opens apps, taps, types and scrolls on a hidden background screen while you keep using the phone, finding buttons by looking at the screen rather than through per-app integrations. There is no Mika server — you download the APK, pair wireless debugging once, and hand it your own model key, so tasks and history stay on the device, with a Linux sandbox per conversation for Python and shell on files you send. The demo list is the pitch: greet recruiters on a job site, find the cheapest nonstop flight, stack coupons on a takeout order and stop before paying. Created October 29, it was the number-one Kotlin repository of the day on Trendshift this week, and it is the first on-device phone agent here that is not a research demo with a waiting list.
BLA (TypeScript, about 3,200 stars, MIT) is the defence against the other side of that trend. Point qybaihe/bla at a build you ship — an Electron app, a JS bundle, a Python package, a WASM module, a safetensors file — and it plants format-valid decoys, honey metadata and deep nesting that push an AI reverse-engineering agent like REA past its own size and nesting budgets, leaving it with a truncated, partly wrong picture while your app behaves exactly as before. The published runs are specific: a 128-byte safetensors stub became 10 KB and tripped a 32-level JSON nesting limit; an Electron ASAR header went from 607 bytes to 16.9 MB against a 16 MB cap. The project is also candid about the edges — the Ghidra, Frida and JADX paths are shielded in code but not measured — so read "bankrupt" as covering the artifact formats, not the entire reverse-engineering stack.
Agent Autoloop (TypeScript, about 4,000 stars) fixes the part of coding agents nobody has: a Claude Code or Codex session dies when you close the terminal. KKKKhazix/agent-autoloop runs a small scheduling kernel on your own machine — a cron line, a new GitHub issue or a production alert becomes an event, a rule names which agent takes it and in which folder — and the agent works one round, prints its result and exits. When it reaches a decision that is yours — deleting data, restarting a service, spending money, messaging a person — it pushes a card to Slack, Discord, Feishu, DingTalk or WeCom and stops, so nothing is running and no tokens are burning while you take your time; one tap resumes the same conversation. It reports tokens and cost for today and the past seven days, and it picked up 4,000 stars in five days, which says how badly people want their agents to keep working after they walk away.
rea-video (Python, about 3,900 stars) answers a question with real search volume behind it: was this video filmed, generated or coded? JuneYaooo/rea-video cuts a clip into shots, splits the audio into voice, music and effects, then ranks hard evidence — frame cadence, sensor noise, whether the whole frame pans as one plane, AIGC tags in the metadata — above anything that merely looks off, and escalates disagreements to a vision model or the agent's own review. What comes back is a shot-by-shot verdict plus a remake plan: prompts for the generated shots, gear and lighting for the filmed ones, a Remotion project for the motion graphics. Its own eval claims 98.3% accuracy on the tuning set and 100% on recompressed clips once the agent reviews the uncertain shots — the same measure-and-verify idea behind REA, pointed at video instead of binaries.
Worth watching this week: whether Mika's on-device approach survives the Play Store's accessibility rules, and whether BLA's decoys hold once the reverse-engineering agents start budgeting for them.
Would you let an agent run your phone unattended, and what would you make it ask permission for first? Write to us via our contact page.
