Ohos Chromium Security Review
Helps with security, code review as part of implementing security and authentication workflows.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add ohos-chromium-security-review npx -- -y @trustedskills/ohos-chromium-security-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"ohos-chromium-security-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/ohos-chromium-security-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill performs security reviews of OpenHarmony codebases, specifically focusing on Chromium components. It analyzes the codebase for potential vulnerabilities and adherence to security best practices. The review identifies areas needing attention and provides recommendations for remediation based on industry standards.
When to use it
- Pre-release Security Checks: Before releasing a new version of OpenHarmony with Chromium integration, ensure code quality and identify potential risks.
- Vulnerability Assessments: When investigating suspected security flaws or responding to vulnerability reports within the OpenHarmony system.
- Code Auditing: During periodic audits of the OpenHarmony codebase to maintain a high level of security posture.
- New Feature Integration: When integrating new Chromium-based features, proactively assess their security implications.
Key capabilities
- Chromium component analysis
- Vulnerability identification
- Security best practices adherence checks
- Remediation recommendations
Example prompts
- "Review the OpenHarmony codebase for potential vulnerabilities in the WebView component."
- "Perform a security audit of the Chromium-based media playback module."
- "Analyze this code snippet for common Chromium security flaws and suggest improvements."
Tips & gotchas
The skill's effectiveness relies on providing it with access to relevant OpenHarmony source code repositories. It is designed specifically for Chromium components within the OpenHarmony ecosystem, so results may be less accurate when applied to other areas.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.