hmos-arkui-mvvm-pattern

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the skill content for literal high-entropy credentials. I found long, random-looking password values in signing configuration files (not placeholders):
• test-cases/MVVMTestCaseV1/build-profile.json5
• signingConfigs[0].material.keyPassword = "0000001B0393A1840CFA5F4D1354A9E25C4801A489ACF2F46CCE8B1667F3CA0BF8D66B7E7ADDB74124FEE8"
• signingConfigs[0].material.storePassword = "0000001BF60F3C4FB929217B6D44BB7B78674B028995E0585496F2B416C20C59A73BF7FF3F85E9FAEC30D3"
• test-cases/MVVMTestCaseV2/build-profile.json5
• signingConfigs[0].material.keyPassword = "0000001BA68983B0467386C1DA0A27431D996C89A3BEA78CFE1AEF39EA2BD4950FAF33AD4A34201CEAD017"
• signingConfigs[0].material.storePassword = "0000001B6AB3E2E5EC80145DA5E133D06DF84ACB4DD2E46DCB2DAE1C57DC3C4DC939008FAC7036F985A2C2"

These are high-entropy, appear to be real keystore/PKCS#12 passwords (they would allow access to signing keys), and are not documentation placeholders or simple example passwords. Therefore they meet the definition of secrets and should be treated as exposed credentials.