A.I Ventures Test Gen A.I Agent

Analyzes a given URL and automatically generates comprehensive functional, UI, and boundary test cases.

Do not run or install this skill as-is. The analyze-dom.js file is empty, so the package cannot perform its stated task — this is an implementation gap that could be benign (forgotten file) or a sign the real code is supplied later from an untrusted source. Before installing or running anything: 1) request the full analyze-dom.js source and review it for network calls, file I/O, and data exfiltration; 2) verify the package comes from a known author or repository (homepage/source control); 3) if you must test it, run it in an isolated sandbox with no access to sensitive files or credentials and with network egress restricted; 4) be aware playwright will download browsers if installed from npm—prefer installing dependencies from the official registry and reviewing package-lock files; 5) decline use if the author cannot provide source/provenance or if the script contains unexpected network endpoints or secret-accessing code.

Type: OpenClaw Skill Name: ss-ss Version: 1.0.1 The skill bundle is classified as suspicious because the core execution script, `analyze-dom.js`, is missing from the provided files, rendering the skill non-functional. Additionally, the instructions in `skill.md` present a potential shell injection vulnerability by directing the agent to execute a command (`node analyze-dom.js <URL>`) using an unvalidated user-provided variable. While the stated purpose of UI testing is plausible and no clear evidence of intentional malice or data exfiltration was found, the combination of a missing payload and unsafe execution patterns warrants caution.