Usually, all that's needed are the bits to make ADB (Android Debug Bridge) operate, which on Windows are the two libraries (AdbWinApi.dll and AdbWinUsbApi.dll).  But, that really shouldn't be necessary for a commercial product.

Do I need Android SDK to connect my phone in USB debug mode?
I recently came across a cool site for testing .NET code (http://dotnetfiddle.net/).  In the FAQs they mention that they have two restrictions for security purposes:


No access to File System IO
No external internet access


Is this sufficient to prevent malicious users from exploiting the site?  Is there anything that a malicious user could still do even with these restrictions in place?
