ClawHub

Integration Testing Helper

Security checks across malware telemetry and agentic risk

Overview

This is a simple documentation-only integration testing helper, with test-environment caution needed before running service or database actions.

Install this only if you want an agent to help design and run integration tests. Before using run or orchestration workflows, point it at test or staging services, disposable containers, and test databases, and review commands that may start or stop services or prepare data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The example trigger phrase "create integration test for user registration flow" is broad and resembles a normal user request, so an agent may invoke this skill unintentionally during ordinary conversation. Because the skill claims capabilities like service orchestration, data setup, and test execution, accidental activation could lead to unnecessary tool use, environment changes, or execution of potentially disruptive testing actions.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The run command example "run integration tests with coverage report" is ambiguous and could overlap with common developer instructions, making unintended activation likely. In this skill's context, accidental invocation is more dangerous because the described functionality includes orchestrating services, preparing databases, and running parallel tests, which can consume resources or alter test environments without deliberate user intent.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal