hmos-apifault-analysis

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the builtin_execute_command tool to run the HarmonyOS Device Connector (hdc), python, and curl. These utilities are used for intended diagnostic purposes, such as pulling logs from a connected device and executing the provided analysis scripts.
  • [EXTERNAL_DOWNLOADS]: The skill retrieves documentation and source file metadata from the official OpenHarmony repositories on Gitee (gitee.com/openharmony) using curl. These downloads target well-known, official domains for the ecosystem.
  • [DATA_EXFILTRATION]: The skill performs data transfer by receiving log files from a connected physical device via hdc and storing them in a local diagnosis/ directory for analysis. This data movement is fundamental to the skill's purpose of fault diagnostics.
  • [COMMAND_EXECUTION]: Included Python scripts (hilog_collector.py and media_file_analyzer.py) use the subprocess.run method with argument lists to securely invoke external system tools, minimizing the risk of command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:17 AM
Security Audit — agent-trust-hub — hmos-apifault-analysis