v1.0.0

Skylv Integration Testing Helper

BenignClawScan verdict for this skill. Analyzed May 3, 2026, 12:50 AM.

Analysis

This instruction-only testing helper is coherent, but it can guide an agent to run tests, start or stop services, and prepare test databases, so it should be used only in scoped test environments.

GuidanceBefore installing or using this skill, make sure the agent runs tests only against intended test/staging APIs, services, and databases. Review any service start/stop actions, database fixture setup, Docker usage, and CI changes before approving them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

- **Service Orchestration**: Start/stop required services for tests
- **Data Setup**: Prepare test databases and fixtures

The skill may lead an agent to affect running services or databases. This is expected for integration testing, but users should confirm scope and environment before running such actions.

User impactIf pointed at the wrong environment, test orchestration or fixture setup could interrupt services or alter database contents.

RecommendationUse this only against disposable test databases and local/staging services unless you explicitly approve production-safe actions.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

SKILL.md

## Requirements

- Node.js 18+
- Docker (optional, for service containers)

The skill documents runtime tools, while the registry metadata declares no required binaries and there is no install spec. This is not suspicious for an instruction-only skill, but users should verify their own Node/Docker setup.

User impactThe skill may depend on local tooling that is not captured in the registry requirements.

RecommendationConfirm what local tools and containers will be used before allowing the agent to run integration tests.