qa-team-skills@1.8.0
VERIFIEDPublisher claims: "QA 团队测试技能包：当用户提出测试相关需求——需求评审、测试用例设计、 AI/Agent 专项测试、缺陷根因分析、测试报告（日报/周报/阶段/季度）、 团队管理（进度/准出/漏测复盘）、探索性测试——时，按意图路由到对应 能力模块执行专业测试任务。典型触发如"评审这份 PRD""设计登录功能的 测试用例""对支付接口做全量回归并出缺陷报告"。 NOT for：与测试无关的闲聊、一般文档写作或其他非 QA 任务。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Prompt injection attemptassets/agent-test-template.md:1 · Prompt injection attempt — 'ignore previous instructions'Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01CRITICAL
Prompt injection attemptassets/agent-test-template.md:16 · Prompt injection attempt — 'ignore previous instructions'Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01