hmos-account-kit-quicklogin-client
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for integrating standard Huawei Account Kit features, including fetching anonymous phone numbers and implementing one-click login components.
- [SAFE]: The network permissions requested (ohos.permission.INTERNET and ohos.permission.GET_NETWORK_INFO) are necessary and standard for applications communicating with a backend server for authentication.
- [SAFE]: The code templates for network communication (QuickLoginPage.ets) use whitelisted local endpoints (http://localhost:8080) for development and allow for user-specified domain configuration as part of the setup process.
- [SAFE]: The skill includes security best practices, such as recommending the use of random UUIDs to prevent cross-site request forgery (CSRF) during the authentication flow and configuring obfuscation rules to protect necessary property names.
- [SAFE]: All external documentation links refer to official Huawei developer domains (developer.huawei.com) and privacy links (privacy.consumer.huawei.com).
Audit Metadata