Well, that&#x27;s still a scary set of permissions. Application can be fine, but one has to be really careful with the scripts from the untrusted sources. It&#x27;s not hard to sneak something in a large enough file.<p>Android 6 on-demand permission requests should somewhat fix this, but is still not a remedy. I&#x27;ve yet to see any scripting&#x2F;automation tool that&#x27;s able to run scripts properly sandboxed (generate APKs for them or otherwise obtain different UIDs with restricted just-enough permissions).