QA测试主管 测试策略治理
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI02: Tool Misuse and ExploitationWhat this means
If WLS validation is used, the agent may ask to run or manage a local test service, which could consume ports or resources.
Why it was flagged
This can direct the agent to manage a local test runtime, which is operationally relevant but appears purpose-aligned and includes isolation and cleanup guidance.
Skill content
Always start a dedicated WLS test instance with a unique name when WLS validation is required. Always stop the AI test instance after testing.
Recommendation
Review any proposed WLS start/stop commands before running them, ensure they use a dedicated test instance, and confirm cleanup occurs after testing.
