The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses curl and git clone to retrieve API definitions and documentation. These operations target official domains such as developer.android.com, developer.apple.com, and the OpenHarmony repository on gitcode.com. These are well-known developer services and are consistent with the skill's purpose of API analysis.
[COMMAND_EXECUTION]: The skill utilizes shell commands like git and rg (ripgrep) to search through downloaded API source files. These commands are executed within a task-specific cache directory and are used for static analysis and keyword searching rather than executing external code.
[INDIRECT_PROMPT_INJECTION]: The skill processes external documentation which could theoretically contain malicious instructions. However, the skill implements strict boundary markers and verification gates, requiring the agent to prioritize official documentation over community content and to separate facts from claims, which mitigates the risk of following unauthorized instructions embedded in data.

ohos-design-arkui-api-competitive-analysis