The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documents the usage of official HarmonyOS development CLI tools, including hvigorw for project builds and on-device testing, codelinter for static code analysis and fixing, and hstack for parsing obfuscated crash stack traces. These are standard tools within the HarmonyOS SDK ecosystem.
[INDIRECT_PROMPT_INJECTION]: The skill provides code templates and API references that handle external data, which is an inherent part of application development but constitutes a potential attack surface if used to process untrusted input.
Ingestion points: Data enters the application context through network responses (http.request), local persistent storage (preferences.get), and file system reads (fileIo.readSync), as shown in references/api-reference.md and assets/list-page-template.ets.
Boundary markers: Explicit boundary markers or 'ignore' instructions are absent in the simplified documentation snippets, which is typical for developer templates.
Capability inventory: The templates demonstrate capabilities for network communication (http), file system modification (fileIo), and application navigation (router).
Sanitization: The examples show basic data processing (e.g., JSON.parse) without advanced sanitization, which is standard for educational and boilerplate code.

arkts-development