Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Integration Testing Helper

v1.0.0

Assist with creating, running, and managing integration tests for APIs, databases, and services, including orchestration, data setup, and reporting.

0· 21·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sky-lv/integration-testing-helper.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Integration Testing Helper" (sky-lv/integration-testing-helper) from ClawHub.
Skill page: https://clawhub.ai/sky-lv/integration-testing-helper
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install sky-lv/integration-testing-helper

ClawHub CLI

Package manager switcher

npx clawhub@latest install integration-testing-helper
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md says the helper orchestrates services, sets up databases, and requires Node.js 18+ and optionally Docker, but the registry metadata declares no required binaries or environment variables. That mismatch suggests the manifest underreports what the skill actually needs.
!
Instruction Scope
The instructions are high-level and permissive (orchestrate services, start/stop services, prepare databases, generate reports) but provide no constrained, explicit steps. This grants broad discretion to an agent at runtime and could lead to reading/writing system resources, invoking Docker, modifying databases, or prompting for credentials not declared in the manifest.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installation step. That reduces supply-chain risk compared with an arbitrary download/install step.
Credentials
No environment variables or credentials are declared, but the described functionality (database setup, service orchestration, CI integration) commonly requires service credentials, DB connection strings, or access tokens. The absence of declared env requirements is a discrepancy the user should clarify.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide changes in its manifest. Autonomous invocation is allowed (platform default), which is expected for skills of this type but increases the importance of the other concerns noted above.
What to consider before installing
This skill's description and SKILL.md imply it will need Node and (optionally) Docker and may perform start/stop operations on services and modify databases, but the manifest declares none of that. Before installing or enabling it: 1) Ask the publisher to update the manifest to declare required binaries and any env vars/credentials it will need. 2) Only run it in an isolated or test environment (not production) until you confirm what it does. 3) Require the skill to prompt for explicit permission before starting/stopping services or accessing credentials. 4) If you plan to let the agent run autonomously, restrict its scope and monitor logs/operations. If the publisher cannot clarify these inconsistencies, treat the skill as risky and do not grant it access to real systems or secrets.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ckm07vankxyydajkhk9153x85fdpa
21downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

integration-testing-helper

Comprehensive integration testing assistant for AI agents. Create, run, and manage integration tests across APIs, databases, and services.

Overview

Helps agents perform end-to-end integration testing by orchestrating multiple services, setting up test data, and validating system behavior.

Features

  • Test Scenario Design: Create complex integration test scenarios
  • Service Orchestration: Start/stop required services for tests
  • Data Setup: Prepare test databases and fixtures
  • Assertion Library: Built-in assertions for common patterns
  • Test Reports: Generate detailed HTML/JSON test reports
  • CI Integration: Easy integration with GitHub Actions, GitLab CI
  • Parallel Execution: Run multiple test scenarios concurrently

Commands

Create Integration Test

create integration test for user registration flow

Run Tests

run integration tests with coverage report

Validate API Integration

test API integration between auth-service and user-service

Use Cases

  • API integration testing
  • Database integration validation
  • Microservice communication testing
  • E2E workflow validation
  • Regression testing

Requirements

  • Node.js 18+
  • Docker (optional, for service containers)

Comments

Loading comments...