Testing Patterns

Security checks across malware telemetry and agentic risk

Overview

This is a coherent instruction-only testing guidance skill; the only noteworthy points are user-directed install commands that use a mutable remote source and optional global installation paths.

This skill appears safe for normal use as testing advice. Before installing, verify the remote GitHub source or use a pinned version, and choose per-project installation unless you intentionally want the guidance available globally.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

If you run the README install command, you may install whatever content is currently at that remote branch.

Why it was flagged

The documented install command uses npx and a mutable GitHub main-branch path rather than a pinned release or commit. It is disclosed and user-directed, but the source should be verified before running.

Skill content
npx add https://github.com/wpank/ai/tree/main/skills/testing/testing-patterns
Recommendation

Prefer installing from a trusted registry entry or a pinned commit/tag, and review the source before running npx-based install commands.

#
ASI10: Rogue Agents
Info
What this means

If installed globally, the testing guidance may influence future agent sessions across projects until removed.

Why it was flagged

The README documents optional global installation into agent skill directories. This is not hidden or autonomous, but global installation makes the skill's instructions available beyond a single project.

Skill content
cp -r ~/.ai-skills/skills/testing/testing-patterns ~/.claude/skills/testing-patterns
Recommendation

Use per-project installation if you only want the skill for one repository, and remove the copied global skill directory to uninstall it.