ClawHub
Back to skill

Security audit

java-unit-test

Security checks across malware telemetry and agentic risk

Overview

This skill is a Chinese-language Java unit-test guidance skill with scoped, disclosed behavior and no evidence of hidden or harmful actions.

Install this if you want Chinese-language guidance for Java unit test design. Review generated test changes as usual, especially when it suggests adding test dependencies such as AssertJ, JaCoCo, Mockito, or ArchUnit.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
93% confidence
Finding
The file content is entirely in Chinese and does not offer any user language choice or state a necessary locale constraint. This can cause users, reviewers, or downstream agents operating in other languages to misunderstand testing guidance, leading to incorrect use of the skill and reduced auditability in multilingual environments.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.