deveco-studio-hilog
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Node.js and PowerShell scripts execute local shell commands to facilitate log analysis. This includes using
unziporExpand-Archivefor extracting log bundles, and invoking the HarmonyOS Device Connector (hdc) to query process information and fetch logs. These actions are consistent with the skill's stated purpose of being a developer utility. - [EXTERNAL_DOWNLOADS]: The skill does not perform any remote downloads. It references a local configuration file from a sibling skill (
deveco-studio-emulator) and relies on standard local runtimes (Node.js 14+). Documentation points users to official sources (nodejs.org) for dependencies. - [DATA_EXFILTRATION]: No data exfiltration was detected. File system access is restricted to standard application log paths (e.g.,
%LOCALAPPDATA%\Huawei\DevEcoStudio\logon Windows and~/Library/Huawei/on macOS) and the emulator's local deployment directories. Reports generated by the scripts are saved locally within the log directories. - [PROMPT_INJECTION]: The skill's instructions and prompt templates are technical in nature and do not contain patterns aimed at overriding agent safety guidelines or extracting system prompts.
Audit Metadata