The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation for Linux static test suites (modules/L4_Build/linux_compile_static_suite.md) contains instructions to download build tools (hvigor) from an unverified repository on Gitee (https://gitee.com/laoji-fuli/hvigor0702.git). This source is not associated with a known trusted organization or the skill author.
[REMOTE_CODE_EXECUTION]: Build tools fetched from the unverified Gitee repository are moved into the project's prebuilts directory. These tools are then executed as part of the compilation process when the build.sh script is invoked, posing a supply chain risk.
[COMMAND_EXECUTION]: The scripts/cleanup_group.sh script executes shell commands including rm -rf on directory paths parsed from project BUILD.gn files. While intended for artifact cleanup, this logic performs recursive deletions that could be misdirected if the configuration files are maliciously crafted.

oh-xts-generator-template