Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating System

Zhenhua Zou , Sheng Guo , Qiuyang Zhan , Lepeng Zhao , Shuo Li , Qi Li , Ke Xu , Mingwei Xu , Zhuotao Liu

🏛 Institutions: Tsinghua
📅 Date: February 11, 2026
📑 Publisher: arXiv
💻 Env: Mobile
🔑 Keywords: agent security prompt injection access control intent-centric OS MobileSafetyBench Aura

TLDR

This paper analyzes security failures in mobile GUI agents and proposes Aura, an intent-centric runtime architecture that replaces GUI scraping with structured interaction mediated by identity, semantic firewalls, taint-aware memory, and access control. It reports strong task performance while greatly reducing attack success on MobileSafetyBench.

Open paper arXiv Report issue