req-to-testcase

从需求文档自动生成全面覆盖的测试用例，并支持导出为 XMind 格式。 当用户上传需求文档（Word、PDF、Markdown、TXT）并要求生成测试用例时，必须触发本技能。 触发关键词：上传需求文档、解析需求、生成测试用例、测试用例转 XMind、 需求拆解、需求分析生成测试、全面测试覆盖、导出 XMind、生...

This skill appears to do what it claims: parse uploaded requirement documents, generate structured test cases, and produce an XMind file. Things to consider before installing or enabling it: - Automatic triggering: SKILL.md requires the skill to run whenever a user uploads a document or mentions certain keywords, even if the description is incomplete. If you have sensitive documents that should not be processed automatically, disable auto-triggering or require explicit user confirmation before running. - Dependency installation: The scripts suggest installing Python packages at runtime and include guidance to use pip with --break-system-packages. On shared or managed hosts this can alter the environment or be blocked. Prefer installing dependencies in an isolated environment (virtualenv / container) under controlled conditions rather than allowing the skill to pip-install into the system interpreter. - File handling: The reader processes arbitrary uploaded files. While the code only reads and extracts text, parsing third-party document formats (PDF, DOCX, Excel) relies on third-party libraries that could have vulnerabilities. Run in an isolated environment if uploads could be untrusted. - Review included code: The repository is small and readable; if you require higher assurance, review the two scripts (read_requirement_file.py and xmind_tools2.py) yourself or have them audited. They do not contain network calls or credential exfiltration logic. - Output sharing: The skill uses present_files (platform tool) to share outputs; ensure your sharing policies are enforced and files are stored/cleaned according to your data retention rules. If you are comfortable with the operational notes above (isolate dependency installs, restrict automatic triggers, and vet untrusted uploads), this skill is coherent with its stated purpose.

Type: OpenClaw Skill Name: req-to-testcase Version: 1.0.0 The skill bundle is a legitimate tool designed to parse requirement documents and generate XMind test cases. The Python scripts (read_requirement_file.py and xmind_tools2.py) use standard libraries like pandas, pypdf, and python-docx to process files and the xmind library for output generation, with no evidence of data exfiltration, unauthorized network access, or malicious intent. While the instructions suggest using '--break-system-packages' for dependency installation, this is a common requirement in specific containerized environments and does not indicate malice in this context.