FOSMVVM React View Generator

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill coherently scaffolds FOSMVVM React component and test files without requesting credentials, installs, shell access, or hidden runtime behavior.

This appears safe for its stated purpose, but because it generates files in your source tree, review the resulting diffs and confirm any FOSMVVM request names, parameters, and button actions match your intended application behavior.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

Installing and invoking this skill may lead the agent to add or modify React component and test files in your repository.

Why it was flagged

The skill instructs the agent to create source and test files in the user's project. This is purpose-aligned for a React view generator, but it is still a real project mutation users should review.

Skill content

2. Generate .test.js file → Tests FAIL (no implementation yet)
3. Generate .jsx file → Tests PASS

Recommendation

Review generated file paths, diffs, and any ServerRequest bindings before committing or running the new code.