check-test-code-quality

Fail

Audited by Socket on May 2, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
guides/R012_p7b_signature/signature_tools/temp_profile.p7b

This fragment appears to be a signed enterprise/MDM profile payload containing embedded certificate material and metadata (including debug=true and a list of specific device-ids). There is no evidence of executable malicious behavior in the provided content (no network/exfiltration/command execution observed). Main risk is privacy/targeting implications from device identifier inclusion and the presence of extensive embedded certificate/profile data. Further assurance would require inspecting how/where this profile blob is used in the wider project and whether it enables sensitive permissions or debug behavior.

Confidence: 80%
Audit Metadata
Analyzed At
May 2, 2026, 01:12 PM
Package URL
pkg:socket/skills-sh/openharmonyinsight%2Fopenharmony-skills%2Fcheck-test-code-quality%2F@87adac74fa842bd2d120d9e063eb77d4ec9b27a3