Skills/ClawHub/qa-boundary-deep-dive

qa-boundary-deep-dive@1.8.0

VERIFIED

Publisher claims: "从输入、状态、时间、资源四个维度系统化识别边界条件。真正的 Bug 往往在"看起来不是边界"的地方——比如用户名字段没测超长 Unicode、订单支付刚好在超时前1秒完成、1000人同时下单。当需要补充边界测试、等价类划分完成后需要补边界值、或者直觉告诉你某些边界可能有问题时，应当使用此技能。每个边界条件都需要标注风险等级并给出明确的预期结果。适用于任何有输入字段、状态变化、时间约束或资源限制的系统。 触发场景：边界分析、边界条件、还有什么边界、边界值、边界扫描、等价类划分完成后需要补充边界值测试时。 Use when the user asks about: boundary value analysis across input, state, time, and resource dimensions — finding edge cases that the obvious boundary list misses." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kokxi · joined 5 days agoInstalls 1,150Last detonated 5d ago
$clawhub install qa-boundary-deep-dive
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:21 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

No other findings across 430 lines in 4 files.