Back to skill
Skillv2.0.6
ClawScan security
FOSMVVM UI Tests Generator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 21, 2026, 4:06 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only template generator for XCTest UI tests targeting FOSMVVM SwiftUI views; it requests no credentials, performs no installs, and its requirements align with its stated purpose.
- Guidance
- This skill is a set of templates and instructions for generating UI tests — it does not install software or request secrets. Before using: (1) review the templates to ensure the app bundle identifier and test configuration match your project and that no sensitive data is embedded in generated tests; (2) confirm you have and trust the referenced libraries (FOSTestingUI, FOSMVVM) before running tests; (3) remember tests run locally under Xcode — don't run generated tests against production systems or devices containing sensitive data; and (4) if you want additional assurance, inspect the SKILL.md/reference.md files manually (they're included) before enabling autonomous agent invocation.
Review Dimensions
- Purpose & Capability
- okThe name/description (generate UI tests for FOSMVVM SwiftUI views) matches the SKILL.md and reference templates. Declared OS restriction (darwin) is appropriate for Xcode/XCTest, and there are no unrelated env vars, binaries, or config paths requested.
- Instruction Scope
- okRuntime instructions and templates are limited to creating XCTest/FOSTestingUI test files, helper extensions, and ViewModelOperation stubs. They reference typical test scaffolding (Bundle.main, app bundle identifier, accessibility identifiers) but do not direct the agent to read unrelated system files, exfiltrate data, or contact external endpoints.
- Install Mechanism
- okNo install spec and no code files to execute — instruction-only templates. This is the lowest-risk install profile.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. The templates mention a bundle identifier and test configuration payloads (local to tests), which are proportional to the purpose.
- Persistence & Privilege
- okalways:false (default) and the skill does not request persistent system privileges or modify other skills. Allowing autonomous invocation is the platform default and not by itself a concern here.