Menu
HarmonyOS (OpenHarmony) ABC 入口点的安全分析配置
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
IVAgent 测试与评估工作流。修改代码后运行回归测试、LLM 语义评测和日志分析。当用户要求测试、验证、评估或回归检查时使用。
系统测试通用 workflow：对 IDA 伪代码视图执行自主漏洞挖掘
系统测试 workflow: baseband_nas_tft_overflow_01
系统测试 workflow: baseband_rlc_reassembly_01
系统测试 workflow: bluetooth_gatt_underflow_01
系统测试 workflow: bt_l2cap_fragment_uaf_01
| name | harmony-entry |
| description | HarmonyOS (OpenHarmony) ABC 入口点的安全分析配置 |
| engine | abc |
| target_type | harmonyos |
| taint_sources | ["want 参数 (getStringParam, getIntParam 等)"] |
| dangerous_apis | ["want.getStringParam()","want.getIntParam()","featureAbility.getContext()"] |
| tags | ["harmonyos","entry_point"] |
代码中可能通过 want 获取外部输入，里面的数据是污点数据，需要校验，避免出现漏洞。
需重点检查的 API：
want.getStringParam() - 获取字符串参数want.getIntParam() - 获取整数参数featureAbility.getContext() - 获取上下文