openharmony-security-review
✓在检查 OpenHarmony C++ 系统服务代码是否存在安全漏洞时使用，特别是 IPC 处理程序、多线程组件或处理敏感用户数据的代码
SKILL.md
OpenHarmony system services run with high privileges and handle untrusted inputs via IPC and network interfaces. This skill provides a structured approach to identifying critical security vulnerabilities in four key areas: external input handling, multithreading race conditions, sensitive information leakage, and permission validation.
Header file input (.h/.hpp): Analyze corresponding xxxService.cpp and xxxStub.cpp Stub file input (xxxStub.cpp): Extend analysis to xxxService.cpp (core logic + shared state) External calls: Flag cross-component concurrency risks for separate review
| IPC Deserialization | All MessageParcel reads checked for success | HIGH | | Logical Validation | Array lengths/indices validated AFTER deserialization | HIGH | | Integer Bounds | Size variables: 0 <= size <= MAXALLOWEDBUFFER | HIGH | | Object Lifecycle | RemoteObjects/fd validated before use (nullptr check) | HIGH |
可引用信息
为搜索与 AI 引用准备的稳定字段与命令。
- 安装命令
npx skills add https://github.com/openharmonyinsight/openharmony-skills --skill openharmony-security-review- 分类
- !安全工具
- 认证
- ✓
- 收录时间
- 2026-02-01
- 更新时间
- 2026-02-18
快速解答
什么是 openharmony-security-review？
在检查 OpenHarmony C++ 系统服务代码是否存在安全漏洞时使用，特别是 IPC 处理程序、多线程组件或处理敏感用户数据的代码 来源：openharmonyinsight/openharmony-skills。
如何安装 openharmony-security-review？
打开你的终端或命令行工具（如 Terminal、iTerm、Windows Terminal 等） 复制并运行以下命令：npx skills add https://github.com/openharmonyinsight/openharmony-skills --skill openharmony-security-review 安装完成后，技能将自动配置到你的 AI 编程环境中，可以在 Claude Code 或 Cursor 中使用
这个 Skill 的源码在哪？
https://github.com/openharmonyinsight/openharmony-skills
详情
- 分类
- !安全工具
- 来源
- skills.sh
- 收录时间
- 2026-02-01