by 安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only skill that provides conceptual TDD guidance and does not request credentials, install code, or perform I/O — its declared scope matches its content.
评估建议
This skill is a safe, instruction-only TDD guide: it contains no code, no install, and requests no credentials. If you plan to let an agent act autonomously with this skill, review the agent's tool permissions (the skill metadata lists tools like Bash and file operations even though the document does not use them) and consider disabling autonomous invocation if you prefer manual control. Also verify the GitHub homepage if you want the original source context.详细分析 ▾
✓ 用途与能力
Name and description (TDD workflow, RED-GREEN-REFACTOR) match the SKILL.md contents. The skill declares no binaries, env vars, or config paths, which is proportionate for a documentation/guide skill.
✓ 指令范围
Runtime instructions are purely conceptual TDD guidance (laws, phases, patterns). The SKILL.md does not instruct the agent to read files, access environment variables, call external endpoints, or perform actions outside of giving procedural advice. Note: the metadata lists allowed-tools (Read, Write, Edit, Glob, Grep, Bash) but the instructions do not require or direct use of those tools.
✓ 安装机制
No install spec and no code files are present; nothing is written to disk or downloaded. This is the lowest-risk install posture.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths — appropriate for a purely instructional skill.
✓ 持久化与权限
always is false and model invocation is not disabled (default). This is the normal configuration for a user-invocable instruction skill and is not excessive given the skill's non-sensitive nature.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.0
Commit after each refactor
● 无害
安装命令
点击复制官方npx clawhub@latest install timeflow-tdd-workflow
镜像加速npx clawhub@latest install timeflow-tdd-workflow --registry https://cn.longxiaskill.com