XMind Test Case Generator

根据需求文档生成 XMind 格式测试用例。当用户要求"写测试用例"、"生成用例"、"写XMind用例"时使用。

What to consider before installing or running this skill: - Clarify Feishu access: SKILL.md expects to fetch full Feishu documents (feishu_fetch-doc) but the skill metadata does not declare Feishu credentials or how that fetch is performed. Ask the author whether the skill relies on a platform tool with Feishu access or whether you must supply a Feishu API token. Do not grant broad org-wide tokens until you verify the implementation. - Be cautious about granting the agent access to code repositories or local directories. The workflow explicitly requires deep reading of client/server code and extracting endpoints and handler locations — this is normal for thorough test-case generation, but it means the agent may read potentially sensitive source files. Prefer running the included script locally yourself against a curated subset of files instead of giving the skill autonomous file-system or repo access. - Review the included script before use. The provided scripts/gen_xmind.py is short, uses only Python stdlib, creates a .xmind ZIP, and writes to ~/Desktop/工作/<name>.xmind. It does not perform network requests or run external commands — that reduces risk. Still, verify the output path and that overwriting existing files is acceptable. - Limit exposure: If you must let the agent fetch docs, provide only the specific documents needed (or a temporary API token scoped to a single document) and avoid giving blanket access to all project repos or to organization-level data. - Ask for clarification from the skill author about undeclared requirements: request a clear list of required tools/credentials (e.g., Feishu token, repo access method) and whether the skill will ever transmit fetched documents or code off the host. The current mismatch (instructions that need Feishu + no declared creds) should be resolved before enabling automatic execution. If you're unsure, run gen_xmind.py yourself on a local, sanitized copy of the requirement document and a limited set of code files rather than giving the skill autonomous access to your systems.

Type: OpenClaw Skill Name: xmind-testcase-generator Version: 1.1.0 The skill bundle is a legitimate tool designed to generate XMind test cases from requirement documents. The Python script `scripts/gen_xmind.py` uses standard libraries to create a ZIP-based .xmind file and includes a template for test case data. The instructions in `SKILL.md` and `xmind-testcase.md` provide a professional workflow for a senior QA persona, including deep code analysis and request tracing to ensure comprehensive test coverage. While the script writes to a specific local directory (`~/Desktop/工作/`) and lacks path sanitization for the output filename, these are functional requirements or minor vulnerabilities rather than indicators of malicious intent.