Test Master

PassAudited by ClawScan on May 10, 2026.

Overview

This is an instruction-only testing skill with no install, code, credentials, or hidden runtime behavior, though some examples should only be used in safe test environments.

This skill appears safe to install as a markdown-only testing guide. When using it, keep test execution scoped to local, test, or staging environments; do not let the agent run load tests, security payloads, database cleanup, or code deletion against production without explicit review.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If applied to the wrong environment, a test cleanup pattern could delete real user data.

Why it was flagged

The reference includes a destructive database cleanup example. This is common for integration tests, but it matters if copied or run against a non-test database.

Skill content
beforeEach(async () => { await db.query('DELETE FROM users'); });
Recommendation

Use these examples only with isolated test databases and require explicit confirmation before running destructive cleanup against any shared or production system.

What this means

The agent may be overly strict about TDD and suggest deleting or rewriting code rather than simply adding tests.

Why it was flagged

The TDD guidance is purpose-aligned but absolute; if interpreted literally by an agent, it could push deletion or rewriting beyond the user's immediate request.

Skill content
If you wrote production code before writing a failing test, delete it and start over. No exceptions.
Recommendation

Tell the agent not to delete, replace, or heavily rewrite existing code without your explicit approval.