I know this is for testing purposes, but I'm a bit concern that could be use to install an app in a production phone (wiht dns poisoning) and could drive to malicious intentions.
Not so sure if it will pass a security review.