Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs