Python Testing

PassAudited by ClawScan on May 15, 2026.

Overview

This is a benign Python testing cheat sheet; the main caution is that running pytest or installing pytest plugins can execute or modify code in the current Python environment.

This skill appears safe as a documentation-only Python testing reference. Before using it to run commands, make sure the repository is trusted, prefer a virtual environment, and approve any package installation or pytest execution.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used in an untrusted repository, pytest may run that repository's test, fixture, or conftest code.

Why it was flagged

This command runs Python tests and can execute code from the user's repository, but it is directly aligned with the skill's Python testing purpose and is presented as a reference command, not hidden automatic execution.

Skill content
pytest                        # 运行所有测试
Recommendation

Run test commands only in trusted projects or an isolated environment, and review before allowing the agent to execute tests.

What this means

Installing optional packages can change the active Python environment and depends on the trustworthiness of the package source.

Why it was flagged

The reference includes optional pytest plugin installation from the Python package ecosystem; this is purpose-aligned setup guidance, but it still relies on external package provenance and modifies the user's Python environment if run.

Skill content
pip install pytest-asyncio
Recommendation

Use a virtual environment, install from trusted package sources, and consider pinning versions when adding pytest plugins.