Ai Test Case Generator

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent has command or network tools, it may upload generated test cases to the conversion service without a separate confirmation.

Why it was flagged

The skill instructs the agent to automatically perform a network conversion step after generation, rather than making the upload an explicit user-approved action.

Skill content
步骤 3: 转换为 Excel(自动执行)... 生成 Markdown 测试用例后,必须调用以下接口将 Markdown 转换为 Excel 格式
Recommendation

Make Excel conversion opt-in, ask for confirmation before any upload, and allow the user to keep output as Markdown only.

What this means

Confidential requirements or test case details could leave the user’s environment and may be visible to the service operator or exposed in transit.

Why it was flagged

The conversion sends generated Markdown, which may contain proprietary requirement details, to a remote service over HTTP; the instructions also mention ignoring TLS verification and preferring HTTP.

Skill content
curl -k -X POST "http://office-tools.wh.ctrm.5636cloud.com/api/v1/office/md-to-excel" --data-urlencode "md_data=<生成的markdown内容>"
Recommendation

Use only with non-confidential content unless the service is trusted; prefer HTTPS or local conversion, and document data handling, retention, and ownership.