hmos-instrument-test

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/run_instrument_test.py executes the HarmonyOS build tool hvigorw (or hvigorw.bat) located in the project root provided by the user.
  • Evidence: The script uses subprocess.run(cmd, ...) where cmd is an argument list starting with the path to the hvigorw executable.
  • Safety Note: By using an argument list instead of a shell string and disabling shell execution (shell=False is the default), the script correctly mitigates command injection risks.
  • [SAFE]: The skill does not exhibit any malicious patterns such as data exfiltration, secret harvesting, or code obfuscation. It functions as a standard development utility for the HarmonyOS ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:16 AM
Security Audit — agent-trust-hub — hmos-instrument-test