ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Test Patterns

v1.0.0

Write and run tests across languages and frameworks. Use when setting up test suites, writing unit/integration/E2E tests, measuring coverage, mocking dependencies, or debugging test failures. Covers Node.js (Jest/Vitest), Python (pytest), Go, Rust, and Bash.

⭐ 1· 3.2k·22 current·23 all-time
by@gitgoodordietrying
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description describe writing/running tests across Node/Python/Go/Rust/Bash; the declared requirement that at least one of node, python3, go, cargo, or bash be present is appropriate and proportional for this purpose. No unrelated binaries, credentials, or config paths are requested.
✓
Instruction Scope
SKILL.md contains language-specific test examples (unit, integration, mocking, coverage) and typical commands (npm install -D jest, pip install pytest, npx jest --coverage, creating tmp DBs). The instructions do not ask the agent to read unrelated system files or secret environment variables, nor to exfiltrate data. They do include examples that may perform network calls or create temporary files/databases when run, which is expected for testing guidance.
✓
Install Mechanism
No install spec and no code files are present — instruction-only; nothing will be downloaded or written by the skill itself. This is the lowest-risk install profile.
✓
Credentials
The skill requests no environment variables or credentials. The examples reference typical test-time artifacts (temp files, sqlite), but there is no request for secrets or unrelated credentials.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent presence or modify other skills' configuration. Autonomous invocation is allowed by platform default but is not combined here with broad access.
Assessment
This skill is an offline guide with examples for writing and running tests — it is internally consistent. Before using: ensure the appropriate runtimes (node, python3, go, cargo, bash) are installed as needed; be aware that running tests in a repository will execute the repository's code (including network calls, DB interactions, or any side effects), so run tests in an isolated/sandboxed environment or with mocks when executing untrusted code. Also review any package installs (npm/pip) that test suites require, since installing dependencies can pull third-party code. The skill itself does not request secrets or perform installs, but the tests you run based on its instructions may interact with external services — audit those test cases accordingly.

Like a lobster shell, security has layers — review code before you run it.

latestvk977htp0dy0yaytp6e1nmss2vn80ez94

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧪 Clawdis
OSLinux · macOS · Windows
Any binnode, python3, go, cargo, bash

Comments