mirror of
https://github.com/openharmony/ability_ability_runtime.git
synced 2026-08-24 12:43:16 -04:00
zexin_c
be4a7333b8
- 删除旧的扁平 skill 目录（api-audit/codecheck-orchestrator/deep-scan/external-input-audit/high-impact-bug-audit/logic_analyzer/security-review） - 新增三层架构：patterns/（缺陷模式知识库）+ scanners/（4 个薄层扫描器）+ orchestrator/（调度+refute+合并） - 新增 conventions.md 作为操作规程（§5-§13），从摘要升级为可执行规范 - Path B 统一：单 scanner 直接调用时除原始发现清单外，必须额外生成符合 codecheck_report_TEMPLATE.md 的统一报告（双产出） - 严重等级归一化：security 五档/logic emoji/api ❌⚠️ 统一映射到 P0–P3 - 必检维度自检：单 scanner 查路径特征→必检维度表，缺失则 insufficient - Refute：单 scanner 场景仅 P0 必须做 refute，P1/P2/P3 跳过 Signed-off-by: zexin_c <chenzexin14@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local>