install-harmonyos-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). 该 skill 的运行时工作流是从上游仓库/公开 URL（gitcode.com）克隆并安装 HarmonyOS skills 代码与其文本内容，随后这些内容会被读取并加载到代理的 LLM 上下文中，从而引入“上游/第三方仓库作者”的自由文本（间接提示注入风险）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The linter-cli setup explicitly runs "npm run install-runtime-deps" which clones and installs a custom TypeScript from https://gitcode.com/openharmony/third_party_typescript.git into node_modules, meaning external code is fetched and will be executed as a required runtime dependency.