Tdd Guide

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears purpose-aligned for TDD help, with the main thing to notice being user-directed local Python helpers that operate on source code and coverage reports.

This looks safe to install for its stated TDD purpose, but treat it like any local development helper: run it only on intended project files, avoid providing code or coverage reports that contain secrets, and review generated tests before applying them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The helper scripts may read the files you point them at and produce test or coverage output that could influence your project workflow.

Why it was flagged

The skill documents running included Python helper scripts on local project files; this is central to the stated test-generation purpose and appears user-directed, but it is still local code execution.

Skill content
python scripts/test_generator.py --input math_utils.py --framework pytest
Recommendation

Run only the helper scripts you intend to use, point them at scoped project files, and review generated tests before saving or committing them.

What this means

If installing from outside the reviewed registry package, you may not have an obvious upstream source to verify.

Why it was flagged

The registry metadata does not identify a verifiable upstream source or homepage; this is a provenance/documentation gap, not evidence of malicious behavior.

Skill content
Source: unknown
Homepage: none
Recommendation

Install the reviewed package from the intended registry source, and verify any external repository before cloning or copying files.