Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Performance Testing Toolkit

v1.0.0

企业级性能测试工具包,支持HTTP接口压测、负载测试、性能基准测试和报告生成。 Enterprise-grade performance testing toolkit supporting HTTP load testing, stress testing, benchmark testing and repo...

0· 37·0 current·0 all-time
byLv Lancer@kaiyuelv
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (HTTP load/stress/benchmark testing with reports) matches the code's high-level intent: load_tester.py, stress_tester.py, and perf_testing_toolkit.py implement request generation, metrics and report generation. However, there are duplicated/overlapping implementations (LoadTester appears in multiple files) and naming inconsistencies between the documented CLI/module names and the actual files, suggesting sloppy packaging or an incomplete release.
!
Instruction Scope
SKILL.md and README show CLI examples referencing scripts/perf_tester.py and commands/flags that do not match the provided script filenames (there is no scripts/perf_tester.py in the bundle). Tests and examples reference symbols and modules that do not exist (e.g., tests import TestResults, but code defines TestResult; CLI examples refer to perf_tester.py while packaged scripts are named differently). Because the runtime instructions point to non-existent paths/commands, following them will fail or cause unexpected behavior.
Install Mechanism
There is no install spec (instruction-only from registry perspective). The package ships source files only; no remote downloads or installers are requested. This is lower-risk than arbitrary installers, but the code will run network requests when used (normal for a load tester).
Credentials
The skill requests no environment variables, credentials, or special config paths. The code accepts user-supplied target URLs and headers (including Authorization headers in examples), which is expected for a testing tool. No hardcoded external endpoints or credential-collection behavior was found.
Persistence & Privilege
The skill is not marked always:true and does not request any agent-level persistence. It has normal, transient behavior and does not attempt to modify other skills or global config.
What to consider before installing
This package appears to be a legitimate performance-testing toolkit but contains multiple inconsistencies and likely packaging errors. Before installing or running it: - Do not run the example CLI commands from SKILL.md: they reference scripts/perf_tester.py which is not present. Confirm the correct script names (e.g., load_tester.py, stress_tester.py, perf_testing_toolkit.py) and update commands accordingly. - Run the test suite and examples in a sandbox or disposable environment first. The provided tests reference missing types/names (TestResults vs TestResult) and other mismatches that will likely cause failures; the tests indicate the package may be incomplete or unmaintained. - Review the source files yourself for the specific behavior you need. The code will make outbound HTTP requests to whatever target you pass — do not point it at production or third-party systems without permission (high-concurrency tests can look like DDoS). - If you intend to use this with an automated agent, fix the documentation/entrypoints and ensure the CLI entrypoint filenames match SKILL.md. Prefer running locally in isolated network environment or container, and limit concurrency while validating behavior. Given the inconsistencies, treat the package as unreliable until the maintainer clarifies and corrects filenames, exports, and tests.

Like a lobster shell, security has layers — review code before you run it.

latestvk972664wdcxh5jvgfggyft69z185305f
37downloads
0stars
1versions
Updated 2d ago
v1.0.0
MIT-0

Performance Testing Toolkit | 性能测试工具包

一套完整的性能测试解决方案,用于测试API、Web服务和应用程序的性能表现。

A comprehensive performance testing solution for testing APIs, web services, and application performance.

核心功能 | Core Features

  • 🚀 HTTP负载测试 | HTTP Load Testing - 模拟高并发请求测试接口性能
  • 📊 实时性能监控 | Real-time Performance Monitoring - CPU、内存、响应时间追踪
  • 📈 压力测试 | Stress Testing - 逐步增加负载直到系统瓶颈
  • 🎯 基准测试 | Benchmark Testing - 对比不同配置的性能表现
  • 📋 可视化报告 | Visual Reports - 自动生成HTML/JSON性能报告
  • 🔧 灵活配置 | Flexible Configuration - 支持自定义请求头、参数、断言

快速开始 | Quick Start

命令行使用 | CLI Usage

# 基础负载测试 | Basic load test
python scripts/perf_tester.py load --url https://api.example.com/users --concurrent 100 --duration 60

# 压力测试 | Stress test
python scripts/perf_tester.py stress --url https://api.example.com/search --start 10 --max 1000 --step 50

# 基准对比测试 | Benchmark test
python scripts/perf_tester.py benchmark --config benchmark.yaml

Python API | Python API

from performance_testing_toolkit import LoadTester, StressTester

# 负载测试 | Load test
tester = LoadTester(url="https://api.example.com/api", concurrent=100)
results = tester.run(duration=60)
print(f"平均响应时间: {results.avg_response_time}ms")

# 压力测试 | Stress test
stress = StressTester(url="https://api.example.com/api")
stress.run(start_concurrent=10, max_concurrent=1000, step=50)

参数说明 | Parameters

参数说明默认值
--url目标URL必填
--concurrent并发用户数10
--duration测试持续时间(秒)60
--methodHTTP方法GET
--headers请求头(JSON格式){}
--output报告输出格式html

示例 | Examples

详见 examples/ 目录。

测试 | Tests

python -m pytest tests/ -v

Comments

Loading comments...