minium-test-fixer
v1.0.3Minium 测试用例修复工具。自动修复测试中的元素定位错误，分析错误日志、读取 WXML 快照、找到正确元素定位并修复代码。当测试报错"找不到元素"、需要优化元素定位、或分析 WXML 结构时使用此技能。支持本地运行日志和云测平台报告。
⭐ 0· 106·0 current·0 all-time
by梦中大侠@yiziria
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (fixing Minium element-locators using WXML and logs) match the SKILL.md: it reads error logs and WXML, runs minitest, analyzes element definitions and updates Page Object code. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
SKILL.md instructs the agent to run local test commands (minitest), activate the WeChat Developer Tools window via COM/PowerShell, read local files (error_wxml/*.xml, Page Object files, basedef.py), and edit source files (via an edit(...) helper) — all of which are coherent for a fixer but involve executing shell/PowerShell commands and modifying local code. The skill does explicitly require user confirmation before edits and mandates local verification, which is good. Note: the workflow is Windows- and environment-specific (PowerShell, AppActivate, WeChat devtools).
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk by the skill itself. This is the lowest-risk install profile.
Credentials
The skill requests no environment variables, credentials, or config paths beyond reading project/test artifacts (config.json, Page Object files, error_wxml). Those file accesses are proportionate to the stated task.
Persistence & Privilege
always is false and there is no request for persistent/global privileges or modifications to other skills or agent-wide config. The skill assumes the agent can run commands and use an edit tool, which is normal for a code-modifying helper.
Assessment
This skill is coherent for its stated purpose but exercises invasive local capabilities: it runs tests, activates your WeChat Developer Tools window, reads local project files and WXML snapshots, and can modify source files (it does say it will ask for confirmation before changes). Before installing/using it: (1) ensure you run it on a Windows environment with WeChat devtools and minitest as expected; (2) keep a current backup or use a feature branch / version control so you can revert edits; (3) confirm the agent prompts before it performs edits and local test runs; (4) avoid pasting logs/screenshots that contain secrets or tokens; (5) note the skill source/homepage is unknown — prefer skills from known sources or audit the generated changes before committing. If you want stronger safety, require manual approval for every edit and run tests yourself rather than letting the agent run commands autonomously.Like a lobster shell, security has layers — review code before you run it.
latestvk977hz5zjvncrf3v6z8pkr6f9583p4qm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.