← Back to Skills Marketplace
925
Downloads
0
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install agents-skill-tdd-helper
Description
Lightweight helper to enforce TDD-style loops for non-deterministic agents.
README (SKILL.md)
tdd-helper
Lightweight helper to enforce TDD-style loops for non-deterministic agents.
Features
tdd.pywraps a task: fails if tests are absent or failing, refuses to run "prod" code first.- Watches for lint/warnings (optional) and blocks on warnings-as-errors.
- Simple config via env or JSON.
Usage
# Define tests in tests/ or specify via --tests
python tdd.py --tests tests/ --run "python your_script.py"
Usage Guidance
This skill is internally consistent with its purpose, but note that tdd.py will execute whatever shell commands it is given (tests, linter, and the --run command) using shell=True. Before installing or enabling autonomous invocation: (1) ensure pytest and any linters are trusted and present, (2) avoid passing untrusted inputs into --run/TEST_CMD/LINT_CMD to prevent command injection, (3) consider restricting which commands an agent may ask this skill to run or use sandboxing (containers, timeouts) when running untrusted code, and (4) be aware optional env vars (WARN_AS_ERROR, TEST_CMD, LINT_CMD) control behavior though they're not declared in the metadata.
Capability Analysis
Type: OpenClaw Skill
Name: agents-skill-tdd-helper
Version: 0.1.0
The `tdd.py` script contains multiple critical shell injection vulnerabilities. It uses `subprocess.run(..., shell=True)` to execute user-controlled input from command-line arguments (`--run`, `--tests`) and environment variables (`TEST_CMD`, `LINT_CMD`). This allows for arbitrary command execution on the host system, posing a significant Remote Code Execution (RCE) risk. While this is a severe vulnerability, there is no evidence of intentional malicious behavior (e.g., data exfiltration, backdoor installation) within the script itself, aligning it with a 'suspicious' classification rather than 'malicious'.
Capability Assessment
Purpose & Capability
Name/description (TDD helper) align with the included tdd.py, README, and SKILL.md. Required binaries (python3, pytest) are appropriate for running tests and the script; no unrelated credentials or system paths are requested.
Instruction Scope
SKILL.md and tdd.py stay within the stated purpose (run tests, optionally lint, then run a target command). However, the script executes TEST_CMD, LINT_CMD and the provided --run command with shell=True, which will run arbitrary shell commands — expected for a wrapper but important to note because it executes whatever command the agent or user supplies.
Install Mechanism
No install spec; this is instruction-only with a small included script. Nothing is downloaded or written to disk by an installer step.
Credentials
The skill requests no credentials and only optionally reads TEST_CMD, WARN_AS_ERROR, and LINT_CMD. Those env vars are reasonable for configurability, though they are not listed under requires.env in metadata (minor omission). No secrets are requested.
Persistence & Privilege
always is false and the skill does not request persistent/privileged presence or modify other skills. It can be invoked autonomously (platform default), which is expected for a developer helper but increases the risk if used by an agent without guardrails.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install agents-skill-tdd-helper - After installation, invoke the skill by name or use
/agents-skill-tdd-helper - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of tdd-helper.
- Enforces TDD workflow for non-deterministic agents by requiring passing tests before running production code.
- Blocks execution if tests are missing or fail.
- Optional lint and warnings-as-errors checks.
- Simple configuration via environment variables or JSON.
Metadata
Frequently Asked Questions
What is Tdd Helper?
Lightweight helper to enforce TDD-style loops for non-deterministic agents. It is an AI Agent Skill for Claude Code / OpenClaw, with 925 downloads so far.
How do I install Tdd Helper?
Run "/install agents-skill-tdd-helper" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tdd Helper free?
Yes, Tdd Helper is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Tdd Helper support?
Tdd Helper is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tdd Helper?
It is built and maintained by cerbug45 (@cerbug45); the current version is v0.1.0.
More Skills