メニュー
Parse ArkWeb security issue inputs such as CVE, Chromium bug, Gerrit CL, PR, and advisory links into an auditable vulnerability intelligence report.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Expert assistant for ArkTS-JS Interoperability in ArkCompiler (ArkTS runtime). 触发场景：修改/调试 ArkCompiler 互操作层代码（static_core/plugins/ets/runtime/interop_js/）、实现 ArkTS 与 JS 跨语言调用、处理 ETS 和 JS 之间的值转换（js_convert/JSRefConvert）、分析 Interop 内存泄漏与 GC 安全点、以及进行相关代码规范审查。
Guide for adding and maintaining ArkTS <-> JS/TS interoperability tests in ArkCompiler. 触发场景：在 plugins/ets/tests/interop_js/tests/ 目录下创建新的 ArkTS 与 JS/TS 互操作（Interop）测试用例、调试/维护已有 Interop 测试、编写 C++ 运行器（GTest runner）或声明文件（.d.ets）时。
Use when an OpenHarmony C++ change must be checked for call-chain completeness, especially for data propagation, IPC/proxy/stub paths, virtual overrides, callbacks, or dlopen/dlsym boundaries. Produces evidence tables and modification coverage matrices; the helper script only discovers candidate edges.
Use when the user wants to download OpenHarmony daily build images or flash them to a real device (DAYU200/RK3568 or others). Triggers on daily build, DAYU200, RK3568, flashing, burning, hdc reboot, upgrading firmware.
为 C/C++ 项目生成 LLVM libFuzzer FUZZ 测试用例、执行 26 条安全规范审查、生成语义化种子数据。 兼容 OpenHarmony / Linux / Android 构建系统。 触发关键词：fuzz 测试、生成 fuzzer、创建 fuzz 用例、fuzz 规范检查、fuzz_test、LLVMFuzzerTestOneInput、种子数据/corpus
ETS-JavaScript interop Promise bridging system in ArkCompiler. Use this skill when working on cross-language Promise conversion between ETS (ArkTS) and JavaScript, including JSConvertPromise Wrap/Unwrap, EtsPromise proxy creation, EtsPromiseRef bridging, CreatePromiseLink, OnJsPromiseCompleted callbacks, connectPromise, SettleJsPromise, PromiseInteropResolve/Reject, EtsAwaitPromise/AwaitProxyPromise, callback queue management, or any code under js_convert.h (Promise section), js_job_queue, ets_promise, ets_promise_ref, std_core_Promise.cpp, or PromiseInterop.ets. Also use when debugging cross-VM Promise state synchronization, coroutine suspension/resumption during await, or napi_deferred lifecycle issues.
| name | arkweb-security-patch-intake |
| description | Parse ArkWeb security issue inputs such as CVE, Chromium bug, Gerrit CL, PR, and advisory links into an auditable vulnerability intelligence report. |
| metadata | {"descriptionZH":"ArkWeb 漏洞情报解析技能。把 CVE、Chromium issue、Gerrit CL、PR、安全公告解析成结构化漏洞情报报告。","tags":["ArkWeb","security","vulnerability","Chromium"]} |
用于 arkweb-security-patch-issue-analyzer。
Use this skill to parse local Chromium issue HTML/MHTML archives, issue links, CVE/security advisory text, Gerrit CLs, PRs, or commit messages into auditable issue analysis artifacts.
context.requirements 中的 issue / CVE / Chromium bug / Gerrit CL / PR / 安全公告链接。.ace-outputs/{runId} 报告或 .ace-outputs/{runId}/{issue_id}/ 目录。context.requirements 指定；未指定时可使用当前工作流给出的默认输入目录。写入每个 issue 独立目录：
.ace-outputs/{runId}/{issue_id}/01_issue_analysis.md.ace-outputs/{runId}/{issue_id}/01_issue_analysis.json如果一次处理多个 issue，必须从本阶段开始就拆成多个 {issue_id} 目录。根目录不得写任何文件；不得生成 01_issue_analysis.index.md/json，也不得生成根级 01_issue_analysis.md/json。
Detailed output structure is in references/issue-analysis-output.md.
字段归属边界：
Use semantic review of issue comments. Do not just regex all URLs. The extraction and deduplication rules are in references/fix-link-extraction.md.
优先使用内置脚本解析本地 HTML/MHTML 归档，不要在运行时重新生成临时 Python 脚本：
python3 skills/arkweb-security-patch-intake/scripts/parse_local_issue_archive.py \
--archive-dir <local_issue_archive_dir> \
--project-root <context.codebase> \
--output-root <context.projectRoot>/.ace-outputs/<runId>
脚本能力：
.html、.htm、.mhtml、.mht，并可读取 issue.zip 里的同类文件到输出目录临时区；<context.projectRoot>/.ace-outputs/<runId>，不能写到 ~/.aceharness/runs/<runId>/outputs/.ace-outputs；context.projectRoot 是工作流输出根，真实 ArkWeb 源码根使用 context.codebase；01_issue_analysis.md/json；{issue_id} 子目录写产物，stdout 输出批量摘要，便于 agent 再做人工复核和补充。如果脚本输出的 upstream_fix_prs[] 为空或 decision=review 较多，agent 再基于原始归档和审计表做语义复核；不要把脚本当成最终判断的唯一来源。