Security audit

OpenHarmony React Native Performance

Security checks for vulnerabilities and agentic risk

Overview

This is a static guidance skill for OpenHarmony React Native performance checks, with no hidden code or credential access found.

Before installing, prefer manually copying the reviewed skill files or pinning installer versions and repository commits instead of running unpinned npx commands from a mutable source. Once installed, the skill should only influence code review and optimization advice for OpenHarmony React Native projects.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: README.md:17
Finding: Unpinned Third-Party Installer Executed Through npx
Content: View full analysis
Remediation: View remediation
add --skill ohos-react-native-performance ``` 2. Replace `` with a repository reference pinned to an audited commit rather than a mutable default branch or shorthand. 3. Publish and verify expected package provenance, maintainer identity, checksums, and signatures where supported. 4. Use a lockfile and npm integrity metadata in automated environments instead of resolving the latest package dynamically. 5. Configure CI and developer systems to use a trusted registry and disable unexpected registry overrides. 6. Prefer manual installation of reviewed files when package execution is unnecessary. 7. Run installation in a least-privileged, isolated environment without production credentials or unrelated sensitive files. 8. Apply the same controls to the separately documented `npx ai-agent-skills install` alternative. ]]>

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The README instructs users to run npx skills directly from the network without pinning a specific package version. If the package or one of its resolution paths is compromised or updated maliciously, users may execute unintended code during installation or use.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 96% confidence
Finding: This command tells users to execute npx skills add against a remote repository without pinning the tool version. Unpinned npx execution increases supply-chain risk because the package resolved at runtime can change and may execute attacker-controlled code if the upstream package is compromised.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 93% confidence
Finding: The shorthand installation example again relies on npx skills without an explicit version pin. That makes installs non-reproducible and exposes consumers to package substitution or malicious updates in the toolchain.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 90% confidence
Finding: The generic skills.sh installation instruction recommends npx skills add without pinning the package version. Because npx fetches and executes packages dynamically, this creates a supply-chain execution risk if the package changes or is compromised.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 90% confidence
Finding: This line recommends using npx skills add for Claude Code users without any version pinning. The danger is contextualized by this being an agent-skill installation path: users are being guided to fetch and run tooling and skill content, so a compromised package could directly affect developer environments.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 94% confidence
Finding: The README advises npx ai-agent-skills install without a pinned version, which carries the same dynamic package execution risk as other unpinned npx commands. A compromised or unexpectedly updated package could execute arbitrary code on the user's workstation during installation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: Line L16 states that the skill is "English-only to reduce token usage," which imposes a language restriction as part of the skill behavior. This is a natural-language policy concern because it forces a specific language without offering the user a choice or opt-in.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.