Security audit
AppDev Skill - 通用应用软件开发工作流
Security checks across malware telemetry and agentic risk
Overview
Most of this is a normal HarmonyOS development workflow, but a bundled demo script appears copied from a coffee-app project and can modify a user's project with unrelated demo-mode code.
Install only if you are comfortable running local shell scripts that modify a project. Avoid scripts/demo-prep.sh unless you specifically want the coffee-app demo behavior, and review Git hooks and generated file diffs before keeping them.
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.