hmos-instrument-test
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_instrument_test.pyexecutes the HarmonyOS build toolhvigorw(orhvigorw.bat) located in the project root provided by the user. - Evidence: The script uses
subprocess.run(cmd, ...)wherecmdis an argument list starting with the path to thehvigorwexecutable. - Safety Note: By using an argument list instead of a shell string and disabling shell execution (
shell=Falseis the default), the script correctly mitigates command injection risks. - [SAFE]: The skill does not exhibit any malicious patterns such as data exfiltration, secret harvesting, or code obfuscation. It functions as a standard development utility for the HarmonyOS ecosystem.
Audit Metadata