harmonyos-review

HarmonyOS code review skill for auditing ArkTS projects against official Huawei development guidelines and security best practices. Use when reviewing HarmonyOS applications for: (1) Security compliance (hardcoded credentials, encryption, input validation), (2) ArkTS language standards (hilog usage, type safety, magic numbers), (3) Component lifecycle management (resource cleanup, event subscription handling), (4) State management (V1/V2 decorator consistency), (5) Database operations (ResultSet handling, transaction management, encryption), (6) Permission management (official permission patterns), (7) Performance issues (async forEach, resource leaks), (8) API version compatibility, (9) Kit usage best practices. Generates comprehensive markdown reports with prioritized fix recommendations.

Safety Notice

This listing is imported from skills.sh public index metadata. Review upstream SKILL.md and repository scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "harmonyos-review" with this command: npx skills add coreylyn/harmonyos-skills/coreylyn-harmonyos-skills-harmonyos-review

HarmonyOS Code Review

Audit HarmonyOS ArkTS projects against official Huawei guidelines. Generate prioritized fix reports.

Review Process

1. Quick Scan

Run in parallel to identify critical issues:

# Hardcoded credentials
grep -r "password\|secret\|key\|token" --include="*.json5" --include="*.ets"

# console instead of hilog
grep -r "console\." --include="*.ets" | grep -v "hilog"

# async forEach anti-pattern
grep -r "forEach.*await" --include="*.ets"

# API version check
grep -r "compileSdkVersion\|targetSdkVersion" --include="*.json5"

# Deprecated API usage
grep -r "@Deprecated\|deprecated" --include="*.ets"

2. Deep Analysis

Apply checklist from references/checklist.md per category.

3. Generate Report

Use references/report-template.md as base structure. Include:

  • Executive summary (issue counts by priority)
  • Detailed findings with file:line references
  • Prioritized fix recommendations
  • Overall grade (A-F)

References

Issue Priority

  • Critical: Blocks release, fix immediately
  • High: Fix soon, affects quality
  • Medium: Technical debt, consider fixing
  • Low: Optional optimization

Exit Criteria

  • All checklist categories reviewed
  • Report generated at docs/YYYY-MM-DD-review.md
  • Critical/high issues have fix suggestions with file:line references

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Coding

harmonyos-dev

No summary provided by upstream source.

Repository SourceNeeds Review
Security

Open Code Review

Scan AI-generated code for hallucinated packages, stale APIs, security anti-patterns, and over-engineering. Use when: (1) reviewing PRs with AI-generated cod...

Registry SourceRecently Updated
90Profile unavailable
Security

Nginx Config

Nginx配置生成。服务器配置、反向代理、SSL、缓存、安全加固、性能优化。Nginx config generator with reverse proxy, SSL, caching, security, optimization. Nginx、服务器、运维。

Registry SourceRecently Updated
1860Profile unavailable
Security

Credential Tester

A little tool to play with Windows security credential-tester, c. Use when you need credential-tester capabilities. Triggers on: credential-tester.

Registry SourceRecently Updated
960Profile unavailable