gingiris-b2b-growth

github.com/clawhub.ai/gingiris-b2b-growth
Verdict: Proceed with caution
0 critical0 high6 medium
C
SCORE 55 / 100
$skillox install gingiris-b2b-growthSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.

Why grade C?

score · 55 / 100

The current grade reflects 6 medium findings (6+ MEDs → C).

0 CRIT0 HIGH6 MED0 LOW
To reach a higher grade
  • B
    Reach Btarget score 75

    Resolve 1 of 6 MED (cap is 5).

  • A
    Reach Atarget score 95

    Resolve 4 of 6 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Latest scan findings

Scan crawl-cocxggtp85kes1p0rgugpppw · Thu, 28 May 2026 15:48:15 GMT · 8ms

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
▾
med
Link text shows "foundation.md" but points at github.com
The visible link text contains the domain `foundation.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 49CWE-601
▾
47| 主题 | 文件 |
48|:---|:---|
49| 奠定基石（PMF、用户调研、社区） | [references/foundation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/foundation.md) |← text→foundation.md · href→github.com
50| 构建增长引擎（PLG/SLG、联盟、渠道） | [references/growth-engine.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/growth-engine.md) |
51| 价值呈现（销售Deck、案例叙事） | [references/value-presentation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/value-presentation.md) |
med
Link text shows "growth-engine.md" but points at github.com
The visible link text contains the domain `growth-engine.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 50CWE-601
▾
48|:---|:---|
49| 奠定基石（PMF、用户调研、社区） | [references/foundation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/foundation.md) |
50| 构建增长引擎（PLG/SLG、联盟、渠道） | [references/growth-engine.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/growth-engine.md) |← text→growth-engine.md · href→github.com
51| 价值呈现（销售Deck、案例叙事） | [references/value-presentation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/value-presentation.md) |
52| 合同模板体系 | [references/contracts.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/contracts.md) |
med
Link text shows "value-presentation.md" but points at github.com
The visible link text contains the domain `value-presentation.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 51CWE-601
▾
49| 奠定基石（PMF、用户调研、社区） | [references/foundation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/foundation.md) |
50| 构建增长引擎（PLG/SLG、联盟、渠道） | [references/growth-engine.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/growth-engine.md) |
51| 价值呈现（销售Deck、案例叙事） | [references/value-presentation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/value-presentation.md) |← text→value-presentation.md · href→github.com
52| 合同模板体系 | [references/contracts.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/contracts.md) |
53| 数据驱动增长 | [references/metrics.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/metrics.md) |
med
Link text shows "contracts.md" but points at github.com
The visible link text contains the domain `contracts.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 52CWE-601
▾
50| 构建增长引擎（PLG/SLG、联盟、渠道） | [references/growth-engine.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/growth-engine.md) |
51| 价值呈现（销售Deck、案例叙事） | [references/value-presentation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/value-presentation.md) |
52| 合同模板体系 | [references/contracts.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/contracts.md) |← text→contracts.md · href→github.com
53| 数据驱动增长 | [references/metrics.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/metrics.md) |
54
med
Link text shows "metrics.md" but points at github.com
The visible link text contains the domain `metrics.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 53CWE-601
▾
51| 价值呈现（销售Deck、案例叙事） | [references/value-presentation.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/value-presentation.md) |
52| 合同模板体系 | [references/contracts.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/contracts.md) |
53| 数据驱动增长 | [references/metrics.md](https://github.com/Gingiris-1031/gingiris-b2b-growth/blob/main/references/metrics.md) |← text→metrics.md · href→github.com
54
55---
View latest scan →
skillox.io/c/gingiris-b2b-growth