hdyceshiceshi

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: xmind-testcase-skill Version: 1.0.0 The skill bundle is a legitimate tool for generating XMind test cases from functional requirements. The workflow uses an LLM to structure the input into JSON and a Python script (generator.py) to build the XMind file using the standard 'xmind' library. No indicators of data exfiltration, malicious execution, or prompt injection were found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The skill may fail to run through the SKILL.md entry point unless the package metadata is corrected.

Why it was flagged

SKILL.md points to scripts/generate_xmind.py, but the provided manifest includes generator.py and skill.yaml uses generator.py instead. This is a packaging or entry-point inconsistency, not evidence of malicious behavior.

Skill content

entry:
  type: script
  command: python3 scripts/generate_xmind.py

Recommendation

Confirm which entry point is intended and update SKILL.md or include the referenced script before relying on the skill.