Automatically create and run basic unit/integration tests for OpenClaw skills to ensure code quality and prevent regressions.
Security Analysis
high confidenceThe skill's code and instructions match its stated purpose (generate and run basic tests for local skills); there are no unexpected network calls, credentials, or installs — but it will execute the target skill's code, which you should treat as untrusted before review or sandboxing.
Name/description (generate and run tests for local OpenClaw skills) align with the included files and runtime behavior. The script reads the target skill's index.js, writes a test.js, and executes it — exactly what a test generator would do.
SKILL.md accurately describes the actions the script takes. However, the instructions do not warn that the generated test will execute the target skill's code (via require or exec), which may have side effects. Running arbitrary skill code is expected for testing, but it's a security consideration that callers should be explicitly warned about or run in a sandbox.
No install spec or external downloads; skill is an instruction + small Node script with no dependencies. Low install risk.
No environment variables, secrets, or external credentials are requested or used. The script operates on the local filesystem only.
The skill does not request permanent presence (always:false) and does not modify other skills' configuration. It performs actions only when invoked.
Guidance
This tool is coherent with its purpose, but it executes the target skill's code (require('./index.js') or running node index.js --help) which can run arbitrary side-effecting code. Before running it: (1) review the target skill's index.js for unsafe behavior; (2) run the generator in an isolated environment or container; (3) avoid running against untrusted or production code; (4) back up any important files — the script will write a test.js into the target skill directory; and (5) consider running generated tests with limited privileges (nonprivileged user, restricted filesystem) to limit potential impact.
Latest Release
v1.0.0
batch sync
Popular Skills
Published by @autogame-17 on ClawHub
