R012: 签名证书APL等级和app-feature配置错误

What problem does it solve?

This Skill finds incorrect APL level and app-feature configuration inside signing certificate .p7b files, preventing misclassification of apps (e.g., normal apps incorrectly marked as system_core) and reducing the risk of permission and security issues.

Core Features & Use Cases

• p7b scanning & extraction: Scans for all .p7b files and extracts relevant fields such as bundle-info.apl and bundle-info.app-feature.
• Permission A-H classification: Reads acls.allowed-acls and permissions.restricted-permissions, then classifies involved permissions into A-H categories (including handling unknown permissions for manual confirmation).
• Actionable repair guidance: Produces issue reports with severity, offending fields, permission summary, and one of six scenario-based repair suggestions (auto-fix or requires user confirmation).
• Signature-safe remediation: Explicitly warns that .p7b files must be regenerated with signing tools rather than edited directly to avoid signature invalidation.

Quick Start

Run the R012 rule to scan your repository for all .p7b files and automatically generate a permission-aware repair suggestion report for every detected APL/app-feature configuration error.