harmonyos

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Security
SecurityMEDIUM
evals/files/migration-plan.md

The plan should not be implemented as a direct one-to-one port. The most serious issues are the unsupported JNI-to-ArkTS assumption, unreliable long-running work from UIAbility.onCreate, stale permission caching and bulk permission prompting, incorrect ArkUI state-model mapping, and use of a debug signing profile for release builds. No malicious behavior is evident in the supplied architecture text, but these issues could cause broken functionality, privacy violations, excessive permissions, AppGallery rejection, or insecure releases.

Confidence: 96%Severity: 82%
Audit Metadata
Analyzed At
Sep 11, 2026, 03:16 PM
Package URL
pkg:socket/skills-sh/lynricsy%2Fhyperskills%2Fharmonyos%2F@47f8f4b7ab32d79cec5a76ee41ba3ff86f3ddd99c1646eaed7efc1df7f503d60
Security Audit — socket — harmonyos