arkweb-security-patch-gitcode-pr

SUSPICIOUS: the workflow purpose is coherent for patch submission, but it enables autonomous public repository actions and relies on an unverified `oh-gc` CLI for remote operations. Main risk is install/execution trust plus external write authority, not confirmed malware.