菜单
Parse ArkWeb security issue inputs such as CVE, Chromium bug, Gerrit CL, PR, and advisory links into an auditable vulnerability intelligence report.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Expert assistant for ArkTS-JS Interoperability in ArkCompiler (ArkTS runtime). 触发场景：修改/调试 ArkCompiler 互操作层代码（static_core/plugins/ets/runtime/interop_js/）、实现 ArkTS 与 JS 跨语言调用、处理 ETS 和 JS 之间的值转换（js_convert/JSRefConvert）、分析 Interop 内存泄漏与 GC 安全点、以及进行相关代码规范审查。
Guide for adding and maintaining ArkTS <-> JS/TS interoperability tests in ArkCompiler. 触发场景：在 plugins/ets/tests/interop_js/tests/ 目录下创建新的 ArkTS 与 JS/TS 互操作（Interop）测试用例、调试/维护已有 Interop 测试、编写 C++ 运行器（GTest runner）或声明文件（.d.ets）时。
Use when an OpenHarmony C++ change must be checked for call-chain completeness, especially for data propagation, IPC/proxy/stub paths, virtual overrides, callbacks, or dlopen/dlsym boundaries. Produces evidence tables and modification coverage matrices; the helper script only discovers candidate edges.
Use when the user wants to download OpenHarmony daily build images or flash them to a real device (DAYU200/RK3568 or others). Triggers on daily build, DAYU200, RK3568, flashing, burning, hdc reboot, upgrading firmware.
为 C/C++ 项目生成 LLVM libFuzzer FUZZ 测试用例、执行 26 条安全规范审查、生成语义化种子数据。 兼容 OpenHarmony / Linux / Android 构建系统。 触发关键词：fuzz 测试、生成 fuzzer、创建 fuzz 用例、fuzz 规范检查、fuzz_test、LLVMFuzzerTestOneInput、种子数据/corpus
ETS-JavaScript interop Promise bridging system in ArkCompiler. Use this skill when working on cross-language Promise conversion between ETS (ArkTS) and JavaScript, including JSConvertPromise Wrap/Unwrap, EtsPromise proxy creation, EtsPromiseRef bridging, CreatePromiseLink, OnJsPromiseCompleted callbacks, connectPromise, SettleJsPromise, PromiseInteropResolve/Reject, EtsAwaitPromise/AwaitProxyPromise, callback queue management, or any code under js_convert.h (Promise section), js_job_queue, ets_promise, ets_promise_ref, std_core_Promise.cpp, or PromiseInterop.ets. Also use when debugging cross-VM Promise state synchronization, coroutine suspension/resumption during await, or napi_deferred lifecycle issues.
| name | arkweb-security-patch-intake |
| description | Parse ArkWeb security issue inputs such as CVE, Chromium bug, Gerrit CL, PR, and advisory links into an auditable vulnerability intelligence report. |
| metadata | {"descriptionZH":"ArkWeb 漏洞情报解析技能。把 CVE、Chromium issue、Gerrit CL、PR、安全公告解析成结构化漏洞情报报告。","tags":["ArkWeb","security","vulnerability","Chromium"]} |
用于 arkweb-security-patch-issue-analyzer。
Use this skill to parse local Chromium issue HTML/MHTML archives, issue links, CVE/security advisory text, Gerrit CLs, PRs, or commit messages into auditable issue analysis artifacts.
context.requirements 中的 issue / CVE / Chromium bug / Gerrit CL / PR / 安全公告链接。.ace-outputs/{runId} 报告或 .ace-outputs/{runId}/{issue_id}/ 目录。context.requirements 指定；未指定时可使用当前工作流给出的默认输入目录。写入每个 issue 独立目录：
.ace-outputs/{runId}/{issue_id}/01_issue_analysis.md.ace-outputs/{runId}/{issue_id}/01_issue_analysis.json如果一次处理多个 issue，必须从本阶段开始就拆成多个 {issue_id} 目录。根目录不得写任何文件；不得生成 01_issue_analysis.index.md/json，也不得生成根级 01_issue_analysis.md/json。
Detailed output structure is in references/issue-analysis-output.md.
字段归属边界：
Use semantic review of issue comments. Do not just regex all URLs. The extraction and deduplication rules are in references/fix-link-extraction.md.
优先使用内置脚本解析本地 HTML/MHTML 归档，不要在运行时重新生成临时 Python 脚本：
python3 skills/arkweb-security-patch-intake/scripts/parse_local_issue_archive.py \
--archive-dir <local_issue_archive_dir> \
--project-root <context.codebase> \
--output-root <context.projectRoot>/.ace-outputs/<runId>
脚本能力：
.html、.htm、.mhtml、.mht，并可读取 issue.zip 里的同类文件到输出目录临时区；<context.projectRoot>/.ace-outputs/<runId>，不能写到 ~/.aceharness/runs/<runId>/outputs/.ace-outputs；context.projectRoot 是工作流输出根，真实 ArkWeb 源码根使用 context.codebase；01_issue_analysis.md/json；{issue_id} 子目录写产物，stdout 输出批量摘要，便于 agent 再做人工复核和补充。如果脚本输出的 upstream_fix_prs[] 为空或 decision=review 较多，agent 再基于原始归档和审计表做语义复核；不要把脚本当成最终判断的唯一来源。