gingiris-opensource

github.com/clawhub.ai/gingiris-opensource
Verdict: Proceed with caution
0 critical0 high7 medium
C
SCORE 55 / 100
$skillox install gingiris-opensourceSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.

Why grade C?

score · 55 / 100

The current grade reflects 7 medium findings (6+ MEDs → C).

0 CRIT0 HIGH7 MED0 LOW
To reach a higher grade
  • B
    Reach Btarget score 75

    Resolve 2 of 7 MED (cap is 5).

  • A
    Reach Atarget score 95

    Resolve 5 of 7 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Latest scan findings

Scan crawl-cvqo6i52qcjjuspb1no477pv · Thu, 28 May 2026 15:48:18 GMT · 1ms

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
▾
med
Link text shows "preparation.md" but points at github.com
The visible link text contains the domain `preparation.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 45CWE-601
▾
43| 主题 | 文件 |
44|:---|:---|
45| 发布前准备 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/preparation.md) |← text→preparation.md · href→github.com
46| 发布日执行清单 | [references/launch-day.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/launch-day.md) |
47| 发布后运营 | [references/post-launch.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/post-launch.md) |
med
Link text shows "launch-day.md" but points at github.com
The visible link text contains the domain `launch-day.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 46CWE-601
▾
44|:---|:---|
45| 发布前准备 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/preparation.md) |
46| 发布日执行清单 | [references/launch-day.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/launch-day.md) |← text→launch-day.md · href→github.com
47| 发布后运营 | [references/post-launch.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/post-launch.md) |
48| KOL 合作清单 | [references/kol-list.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/kol-list.md) |
med
Link text shows "post-launch.md" but points at github.com
The visible link text contains the domain `post-launch.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 47CWE-601
▾
45| 发布前准备 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/preparation.md) |
46| 发布日执行清单 | [references/launch-day.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/launch-day.md) |
47| 发布后运营 | [references/post-launch.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/post-launch.md) |← text→post-launch.md · href→github.com
48| KOL 合作清单 | [references/kol-list.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/kol-list.md) |
49| 渠道资源清单 | [references/channels.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/channels.md) |
med
Link text shows "kol-list.md" but points at github.com
The visible link text contains the domain `kol-list.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 48CWE-601
▾
46| 发布日执行清单 | [references/launch-day.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/launch-day.md) |
47| 发布后运营 | [references/post-launch.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/post-launch.md) |
48| KOL 合作清单 | [references/kol-list.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/kol-list.md) |← text→kol-list.md · href→github.com
49| 渠道资源清单 | [references/channels.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/channels.md) |
50| 文案模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/templates.md) |
med
Link text shows "channels.md" but points at github.com
The visible link text contains the domain `channels.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 49CWE-601
▾
47| 发布后运营 | [references/post-launch.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/post-launch.md) |
48| KOL 合作清单 | [references/kol-list.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/kol-list.md) |
49| 渠道资源清单 | [references/channels.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/channels.md) |← text→channels.md · href→github.com
50| 文案模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/templates.md) |
51
med
Link text shows "templates.md" but points at github.com
The visible link text contains the domain `templates.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 50CWE-601
▾
48| KOL 合作清单 | [references/kol-list.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/kol-list.md) |
49| 渠道资源清单 | [references/channels.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/channels.md) |
50| 文案模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-opensource/blob/main/references/templates.md) |← text→templates.md · href→github.com
51
52---
View latest scan →
skillox.io/c/gingiris-opensource