Harmonyos Mobpush Integration

• Analyzed: May 9, 2026, 10:31 AM
• Findings: 1
• Version: 1.0.0
• Hash: 307af5bf0fd4ead74297dd722b202f443cc17940b17d33f84da7ffc192f8e55f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates MobPush SDK integration for HarmonyOS projects, which involves risky capabilities such as executing shell commands (`ohpm install`), running a local Python script (`assets/generate_excel_template.py`), and modifying project configuration files (`build-profile.json5`, `module.json5`). While these actions are clearly aligned with the stated purpose and include user confirmation steps, the requirement for broad file and execution access falls under the 'suspicious' classification according to the specified threshold for risky but plausibly needed behaviors. No evidence of intentional malice or data exfiltration was found in the code or instructions.