nostr:npub1u27r9h3j9pvrplaffsmpn698e8xhmuqhdgcxldv67ammql9pumnqha3qfq

I've never tried it, but typically there are dummy/safe values for testing. Although I think a common approach for CSAM is just to feed all images to an API provider who gives you back a conclusion, in which case you test differently.