skills.rest
shirulot
shirulotCOMMUNITY
Explore all skills by this author →
GitHub

harmonyos-review

Audit HarmonyOS ArkTS projects for security, performance, and guideline compliance.

Updated Jul 6, 2026
Search Tags:#code review#performance#security audit#huawei#harmonyos#arkts
One-click install
npx skills add https://github.com/shirulot/codex-skill --skill harmonyos-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: harmonyos-review
Source: https://github.com/shirulot/codex-skill/tree/main/harmonyos-review
Command: npx skills add https://github.com/shirulot/codex-skill --skill harmonyos-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the complexity of maintaining high-quality, secure, and performant HarmonyOS applications by automating the audit process against official Huawei development guidelines.

Core Features & Use Cases

  • Security Compliance: Automatically detects hardcoded credentials, secrets, and insecure database configurations.
  • Code Quality & Standards: Enforces ArkTS best practices, including proper hilog usage, lifecycle management, and state decorator consistency.
  • Use Case: Before a release, run this skill to generate a comprehensive report identifying critical performance bottlenecks, deprecated API usage, and missing permission declarations.

Quick Start

Use the harmonyos-review skill to audit the current project and generate a prioritized fix report.

Frequently Asked Questions about harmonyos-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit HarmonyOS ArkTS code for security vulnerabilities and deprecated API usage?▼

You can audit HarmonyOS ArkTS code by automatically scanning the source against official Huawei development guidelines. This process detects hardcoded credentials, improper lifecycle management, and deprecated Stage model API usage to pinpoint security vulnerabilities.

What does an ArkTS code review cover for HarmonyOS Stage model applications?▼

An ArkTS code review for HarmonyOS Stage model applications covers security compliance, code quality, and performance bottlenecks. It checks for hardcoded secrets, enforces state decorator consistency, validates hilog usage, and verifies proper lifecycle management.

Can I check my HarmonyOS project for performance bottlenecks and missing permission declarations before release?▼

Yes, you can check your HarmonyOS project for performance bottlenecks and missing permission declarations before release. Running an automated audit analyzes the ArkTS source code and generates a prioritized report identifying these critical issues for remediation.

How do I generate a prioritized fix report for hardcoded credentials in an ArkTS project?▼

You generate a prioritized fix report for hardcoded credentials by running an automated security audit on your ArkTS project. The audit analyzes the source code and outputs a structured markdown report with specific file and line references for remediation.

Does the HarmonyOS ArkTS audit check for proper state decorator consistency and hilog usage?▼

Yes, the HarmonyOS ArkTS audit checks for proper state decorator consistency and hilog usage. It enforces ArkTS best practices by analyzing source code to ensure adherence to official Huawei development guidelines regarding logging and state management.

Related Skills

Explore More Software Engineering Skills→
shirulotshirulot

harmonyos-app

Provide architectural guidance and coding standards for HarmonyOS NEXT applications using ArkTS and ArkUI.

Community
Advanced
Lonsdale201Lonsdale201
21

wp-security-secrets

Detect hardcoded secrets and insecure credential handling in WordPress plugins and themes.

Community
Advanced
openharmonyinsightopenharmonyinsight
31

arkts-static-spec

Answer ArkTS static-semantics and TypeScript migration questions from official documentation.

Official
Intermediate
OneWave-AIOneWave-AI
245

code-review-pro

Review code for security vulnerabilities, performance bottlenecks, and maintainability issues.

Official
Basic