Test Generator
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill does not show network or credential misuse, but its artifacts are inconsistent and include misleading local data-removal behavior that users should review before use.
Review this skill before installing or using it. It does not show exfiltration or credential access, but its documentation and behavior are inconsistent: it is advertised as a test generator while part of it behaves like a persistent local logging tool, and its remove command does not actually remove logged entries.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may install or invoke the skill expecting test generation while receiving unrelated data-management behavior.
The stated product purpose is test generation, but the main instructions describe a generic data logging and retrieval utility instead.
description: "Automated test case generator..." ... A general-purpose CLI utility tool for data entry, management, and retrieval.
Align the skill description, SKILL.md instructions, and shipped scripts, or split the generic logging utility into a separate clearly labeled skill.
Users may believe local logged data has been removed when it remains stored on disk.
The remove command prints that an item was removed but does not modify the data log or delete any entry.
cmd_remove() {
echo " Removed: $1"
_log "remove" "${1:-}"
}Implement actual deletion from the data log, or clearly label the command as a placeholder that does not remove stored data.
Notes, test results, or command arguments entered through the skill may remain on the machine across sessions.
The skill persistently stores user-provided entries and command history in local files.
Data log: `$DATA_DIR/data.log` — stores all entries added via the `add` command... History log: `$DATA_DIR/history.log` — every command invocation is timestamped and logged
Avoid entering secrets or sensitive project details, and verify how to manually delete the data directory if cleanup is needed.