Skylv Test Writer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This is a straightforward test-writing helper that reads project code and creates test files, with no evidence of hidden access, persistence, or data theft.

Install this only if you want the agent to read project source and create test files in standard locations such as __tests__/ or tests/. Review generated tests and diffs before committing, especially in projects with sensitive code paths or strict CI behavior.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger phrases are broad enough to match many ordinary developer requests such as 'write tests' or 'generate tests', which can cause the skill to activate in situations where the user did not explicitly consent to automated file generation. In this skill's context, that raises the risk of unintended project modifications and misrouting requests away from a more suitable assistant behavior.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill instructs the agent to write test files into standard project locations but does not warn the user that new files will be created. This can lead to unexpected repository changes, clutter, or overwriting conflicts, especially when the skill is triggered by broad testing-related requests.

VirusTotal

67/67 vendors flagged this skill as clean.