ohos-system-app-dev

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION

Full Analysis

[COMMAND_EXECUTION]: The helper script scripts/system-app-sign.mjs uses child_process.spawnSync to invoke the java and keytool utilities for HAP signing and certificate operations.
[DYNAMIC_EXECUTION]: The script dynamically constructs command-line arguments and resolves executable paths for java and keytool based on user-provided project and SDK directories, configuration files, and environment variables.

Audit Metadata

Risk Level

SAFE

Analyzed

Oct 3, 2026, 09:48 AM