ohos-dev-arkui-v1-v2-migration
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several Python scripts (
component_analyzer.py,api_version_checker.py,dependency_tracer.py,mixing_validator.py) to analyze the project's source code. These scripts utilize standard libraries and perform read-only operations on the local file system. They do not execute arbitrary shell commands or external binaries. - [DATA_EXPOSURE]: The skill accesses local project files, including source code (
.ets,.ts) and configuration files (build-profile.json5,app.json5), to extract component structures and API versions. This is the intended functionality for migration analysis. No evidence of data exfiltration or access to sensitive system paths (e.g.,.ssh,.aws) was found. - [REMOTE_CODE_EXECUTION]: All scripts are contained within the skill package. There are no patterns of downloading and executing remote scripts (e.g.,
curl | bash). The logic is entirely local. - [PROMPT_INJECTION]: The instructions in
SKILL.mdand the reference documents follow standard instructional patterns. No attempts to bypass safety filters, extract system prompts, or override agent behavior were detected. - [EXTERNAL_DOWNLOADS]: The skill does not perform any network requests or external package installations. All dependencies are handled via the local Python environment using standard libraries.
Audit Metadata