Test Case Generator

• Verdict: Pass
• Analyzed: May 12, 2026, 4:31 AM
• Findings: 0
• Version: 1.0.0
• Hash: 573692424c9d1f1f2f1676512f879c5af0b0a51e5018a86a2a6ac564f9d0d3b6
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: test-case-generator Version: 1.0.0 The `skill.yaml` implementation for `generateTests` directly interpolates extracted function names (`fn.name`) and parameters (`fn.params`) into the generated test code strings without apparent sanitization. This creates a code injection vulnerability in the *output* of the skill. If the input `code` contains malicious strings in function names or parameters, these could be embedded into the generated test files, potentially leading to arbitrary code execution when a user runs the generated tests. This is a significant vulnerability due to lack of input sanitization, but it does not demonstrate intentional malicious behavior by the skill itself.