deveco-studio-emulator

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Node.js scripts (setup.js and start-emulator.js) to interact with the local operating system. These scripts execute official Huawei development binaries such as emulator and hdc to list virtual device instances, verify tool versions, and launch the emulator in a detached process. This execution is scoped to legitimate development tasks and targets standard installation directories.
  • [EXTERNAL_DOWNLOADS]: The documentation includes references and command examples for the emulator -install utility, which is the official method for downloading HarmonyOS system images from Huawei's authorized repositories. No third-party or unverified downloaders are used.
  • [SAFE]: Analysis of the skill's scripts and configuration templates shows no evidence of obfuscation, credential harvesting, or unauthorized data exfiltration. The use of remote management features via emulator-rpc-service is documented with appropriate security warnings regarding TLS and authentication for production environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:16 AM
Security Audit — agent-trust-hub — deveco-studio-emulator