testcase-generator

Generates comprehensive test cases from MySQL/Redis data. Invoke when user wants to create test cases for an API endpoint.

This skill will search project config files, resolve environment-variable placeholders, and connect to MySQL and Redis to read schemas and data (and can run arbitrary SQL). That is consistent with generating test cases but it means the skill can access sensitive credentials and production data. Before installing or running it: 1) Inspect application.yaml and the provided data_reader.py yourself; confirm no unexpected network calls or hardcoded endpoints. 2) Do not point it at production databases — use a sanitized or read-only replica. 3) Ensure you trust the skill source (owner unknown) or run in an isolated environment/container. 4) Verify that any database connections are read-only and consider removing or disabling execute_query if you only want SELECTs. 5) Ask the publisher to update registry metadata to explicitly declare required credentials and intended safeguards. If you cannot validate these, treat the skill as potentially risky and avoid running it against sensitive systems.

Type: OpenClaw Skill Name: testcase-gen Version: 2.0.1 The skill bundle is designed to extract sensitive database credentials and records from MySQL and Redis by parsing local application configuration files (e.g., Spring Boot's application.yaml). While the stated purpose is generating test cases, the 'scripts/data_reader.py' script and 'SKILL.md' instructions grant the AI agent broad access to potentially sensitive data and include methods for executing arbitrary SQL queries. These high-risk capabilities are plausibly related to the tool's function but lack sufficient access controls, making the bundle a significant vector for data exposure if misused.