harmony-next

SUSPICIOUS. The skill is largely coherent for HarmonyOS NEXT and DevEco automation, and the flagged command-injection patterns appear to be documentation examples rather than load-time execution. The main concerns are transitive installation from a personal GitHub repo and broad autonomous local device/emulator actions, which are proportionate to the purpose but still medium-risk trust and execution surface.