harmony-next

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a development aid for HarmonyOS NEXT, bundling local documentation and scripts for automation.
  • [EXTERNAL_DOWNLOADS]: Contains a script (commandline_tools_manager.py) designed to download HarmonyOS developer tools from direct archive URLs as part of its setup utility.
  • [COMMAND_EXECUTION]: Orchestrates local development tasks by executing shell commands (such as rg for searching references) and interacting with the HarmonyOS emulator via hdc and uitest wrappers. This is a primary function of the skill.
  • [INDIRECT_PROMPT_INJECTION]: Ingests potentially untrusted data from device logs (hilog) and UI layouts. The skill instructions specifically include guidelines for redacting sensitive data and adhering to automation policies to mitigate risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:30 AM
Security Audit — agent-trust-hub — harmony-next