skills/openharmonyinsight/openharmony-skills/openharmony-ci/Socket

openharmony-ci

Warn

Audited by Socket on Mar 26, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

Mostly coherent CI-triage skill that talks to expected OpenHarmony services and does not obviously overreach on credentials or data flow. The main risk is trust in the required `oh-gc` CLI, whose official provenance could not be verified here; that unresolved dependency keeps the overall rating elevated despite otherwise benign behavior.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Mar 26, 2026, 06:03 PM

Package URL

pkg:socket/skills-sh/openharmonyinsight%2Fopenharmony-skills%2Fopenharmony-ci%2F@8a639b29e6ff9f233679b1914f49aafc31f6ff5c