The Agent Testing & Observability Cookbook: Ship Reliable Agent Commerce Systems
v1.0.0The Agent Testing & Observability Cookbook: Ship Reliable Agent Commerce Systems. Practitioner cookbook for testing and monitoring agent commerce: tool contr...
⭐ 0· 17·0 current·0 all-time
by@mirni
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill is a practitioner guide for testing and observability of agent commerce systems. It declares no binaries, no installs, and no environment variables, which is proportionate for a documentation/guide skill. References to the GreenHelix gateway and a 260-test suite are reasonable in a cookbook-style guide; the skill does not itself request gateway credentials or other unrelated capabilities.
Instruction Scope
SKILL.md is large and framed as a cookbook with working Python examples and guidance on chaos testing, tracing, alerting, CI/CD, etc. Because this is an instruction-only skill, the runtime surface is the prose/code examples in the markdown. The file does not declare any instructions that would cause the agent to read host files, exfiltrate secrets, or call external endpoints on its own, but the guide will likely contain code snippets that when copy-pasted could call the GreenHelix gateway or other services. Review any code/examples before executing them, and avoid running tests against production systems without appropriate sandboxing.
Install Mechanism
No install specification; nothing will be downloaded or written to disk by installing the skill. Instruction-only skills are the lowest install risk.
Credentials
The skill declares no required environment variables, credentials, or config paths. While the guide references external tooling (GreenHelix gateway, test suites), the skill itself does not request sensitive secrets. Any credentials needed to run the examples would be supplied by the user at runtime outside the skill.
Persistence & Privilege
always:false and default autonomous invocation settings are used. The skill does not request permanent presence or modify other skills or system-wide settings. Autonomous invocation is allowed by platform default but not accompanied by other concerning privileges.
Assessment
This is a documentation-only skill (a cookbook) and appears coherent with its description. Before using the examples: (1) review any included Python snippets to ensure they don't call production endpoints or embed credentials; (2) run chaos/contract tests only against a sandbox environment (do not run against live financial systems); (3) if the examples reference GreenHelix or a test suite, obtain and configure credentials locally and securely—do not enter secrets into the skill metadata or an unknown UI; (4) copy code into a secure, reviewed environment before executing and ensure appropriate rate limits and safety checks are present. Because there are no installs or requested secrets, the immediate risk from installing this skill is low, but operational risk comes from running the guide's tests against production systems.Like a lobster shell, security has layers — review code before you run it.
ai-agentvk972zrv9yq8vwr25qpqvqcb09984h9jzchaos-engineeringvk972zrv9yq8vwr25qpqvqcb09984h9jzci-cdvk972zrv9yq8vwr25qpqvqcb09984h9jzgreenhelixvk972zrv9yq8vwr25qpqvqcb09984h9jzguidevk972zrv9yq8vwr25qpqvqcb09984h9jzlatestvk972zrv9yq8vwr25qpqvqcb09984h9jzobservabilityvk972zrv9yq8vwr25qpqvqcb09984h9jzopenclawvk972zrv9yq8vwr25qpqvqcb09984h9jztestingvk972zrv9yq8vwr25qpqvqcb09984h9jz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.