uniapp-test

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: uniapp-test Version: 1.0.0 The skill bundle is a legitimate tool designed for uni-app automated testing. It provides a structured workflow for analyzing page structures, generating Jest-based test cases, and executing them using standard npm scripts (e.g., `npm run test:web`). There is no evidence of malicious intent, data exfiltration, or unauthorized command execution; all instructions in SKILL.md are strictly aligned with the stated purpose of a testing engineer.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may steer toward writing or running tests even if the user only mentioned uni-app generally.

Why it was flagged

The skill's trigger language is broader than strictly test requests and could cause the agent to enter a testing workflow for some general uni-app conversations.

Skill content
任何时候用户提到 uni-app、uniapp、uni-app x、uvue...都应使用本 skill,即使用户没有明确说"自动化测试"四个字。
Recommendation

Invoke this skill for explicit testing, test generation, or test-fixing tasks; if the request is unrelated to testing, tell the agent not to use the testing workflow.

What this means

Running tests may execute project-defined scripts and interact with local browsers, simulators, or devices.

Why it was flagged

The workflow directs the agent to run project npm test scripts. This is central to automated testing, but npm scripts execute code defined by the local project.

Skill content
按平台选择对应命令: `npm run test:web` ... `npm run test:app-android` ... `npm run test:mp-weixin`
Recommendation

Use it in trusted project directories and review the project's npm test scripts before allowing commands to run.

What this means

The agent may make persistent changes to test files and possibly the target page source code.

Why it was flagged

The skill authorizes editing test files and, in some cases, business page code. This is purpose-aligned for fixing test failures and is partially bounded by user permission and target-page constraints.

Skill content
如果对应的 `*.test.js` 已经存在:先读再改...如果不存在:新建文件。...业务代码问题...在用户允许或语境明显期望修 bug 的前提下,改业务代码
Recommendation

Review diffs before committing changes, and clarify whether the agent may edit business code or only tests.