harmonyos-linux-cli-dev
Warn
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The setup script 'scripts/setup_harmonyos_env.sh' disables SSL certificate verification for the 'ohpm' package manager using the command 'ohpm config set strict_ssl false'. This configuration makes the system vulnerable to man-in-the-middle (MITM) attacks during the download and execution of external packages.- [COMMAND_EXECUTION]: The 'scripts/setup_harmonyos_env.sh' script appends a source command to the user's '~/.zshrc' file to ensure the environment is initialized in future sessions.- [COMMAND_EXECUTION]: The skill includes scripts that execute system commands to configure development environment settings for 'npm' and 'ohpm'.- [EXTERNAL_DOWNLOADS]: The 'scripts/fetch_harmonyos_commandline_pages.py' script downloads content from official Huawei and Huawei Cloud domains ('developer.huawei.com', 'huaweicloud.com') for documentation purposes.
Audit Metadata