The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill documents an SDK with extensive file system and networking capabilities, which defines a surface for indirect prompt injection.\n
Ingestion points: The SDK ingests data from external search and map APIs (e.g., POI search, weather) as documented in references/api/modules/search.md and references/api/modules/map.md.\n
Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when handling data from external APIs.\n
Capability inventory: The skill describes a powerful file operation utility (references/api/classes/base.BMFileUtils.md) with methods for reading, writing, and deleting files, as well as networking capabilities and the requirement for the agent to execute shell build commands.\n
Sanitization: No specific sanitization or filtering instructions for data processed by the SDK are provided in the skill instructions.\n- [COMMAND_EXECUTION]: The skill requires the agent to run build and dependency installation commands in a shell environment.\n
Evidence: SKILL.md mandates the execution of ohpm install and hvigorw assembleHap as part of the 'Auto Run' build process. These are standard HarmonyOS development tools and are consistent with the skill's primary purpose.\n- [EXTERNAL_DOWNLOADS]: The skill involves fetching official SDK packages from an external registry.\n
Evidence: SKILL.md describes the installation of multiple @bdmap/* packages (such as @bdmap/base, @bdmap/search, and @bdmap/locsdk) using the ohpm package manager. These represent legitimate vendor resources from Baidu Maps.

baidu-map-harmonyos-sdk