Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Minium test-fixing helper, but users should be aware it can run local tests, inspect project files, edit code after confirmation, and manipulate the desktop focus.
Install only if you want an agent to troubleshoot Minium tests in your local project. Before use, confirm any test runs, desktop focus changes, and file edits, and keep unrelated sensitive windows out of focus when the workflow activates WeChat Developer Tools.
The trigger phrases are very broad (e.g. generic statements like '测试报错了' or '帮我看看这个错误') and can cause the skill to activate from ordinary troubleshooting text that does not clearly request this specific capability. In context, accidental activation is more dangerous because the skill then proceeds toward local test execution and file modification workflows.
The skill instructs the agent to activate desktop windows and send keystrokes (including AppActivate and simulated Alt+Tab), which expands behavior beyond analyzing Minium logs and fixing element locators. UI-driving actions can target the wrong foreground window, interfere with unrelated applications, or perform unintended input on the host machine, creating unnecessary local-execution risk.
The quick-start section says users can simply paste an error log and the skill will automatically analyze and repair, implying broad automatic activation from generic input. Because the documented workflow includes running tests, reading local files, and editing code, this lowers the threshold for risky actions without sufficiently explicit consent.
No suspicious patterns detected.
