deveco-studio-hilog

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Node.js and PowerShell scripts execute local shell commands to facilitate log analysis. This includes using unzip or Expand-Archive for extracting log bundles, and invoking the HarmonyOS Device Connector (hdc) to query process information and fetch logs. These actions are consistent with the skill's stated purpose of being a developer utility.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any remote downloads. It references a local configuration file from a sibling skill (deveco-studio-emulator) and relies on standard local runtimes (Node.js 14+). Documentation points users to official sources (nodejs.org) for dependencies.
  • [DATA_EXFILTRATION]: No data exfiltration was detected. File system access is restricted to standard application log paths (e.g., %LOCALAPPDATA%\Huawei\DevEcoStudio\log on Windows and ~/Library/Huawei/ on macOS) and the emulator's local deployment directories. Reports generated by the scripts are saved locally within the log directories.
  • [PROMPT_INJECTION]: The skill's instructions and prompt templates are technical in nature and do not contain patterns aimed at overriding agent safety guidelines or extracting system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:16 AM
Security Audit — agent-trust-hub — deveco-studio-hilog