hbuilderx-cli
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
@dcloudio/hbuilderx-clipackage via npm and references official resources from the DCloud ecosystem (dcloud.net.cn, uniapp.dcloud.net.cn). These are well-known, legitimate developer tools and registries. - [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for running automation tests using the
uni-testcommand, which ingests local file paths (e.g.,--testcaseFile tests/login.test.js). - Ingestion points: File path parameters in the
uni-testCLI command within SKILL.md. - Boundary markers: The skill does not explicitly define prompt boundaries or warnings for the agent regarding the content of these files.
- Capability inventory: Execution of shell commands via the HBuilderX CLI wrapper.
- Sanitization: No specific sanitization logic is described, as the skill acts as a documentation reference for existing tooling.
Audit Metadata