ielts-reading-review
github.com/clawhub.ai/ielts-reading-reviewVerdict: Proceed with caution
0 critical4 high3 medium
C
SCORE 55 / 100
$skillox install ielts-reading-reviewSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.
Why grade C?
score · 55 / 100The current grade reflects 4 high-severity findings (3+ HIGHs → C).
0 CRIT4 HIGH3 MED0 LOW
To reach a higher grade
- BReach Btarget score 75
Resolve 2 of 4 HIGH (cap is 2).
- AReach Atarget score 95
Resolve all 4 HIGH + 1 of 3 MED (cap is 2).
Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.
Latest scan findings
Scan crawl-txot1ta11zbzb25ea7btgkvk · Thu, 28 May 2026 16:11:05 GMT · 3ms
highSensitive filesystem path referencedThe skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.▾
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
68```bash
69# 模式判定逻辑（执行下列检测）：
70test -f ~/.ssh/workbuddy.pem && grep -q "openclaw-tunnel" ~/.ssh/config 2>/dev/null && echo "作者机" || echo "客户端机"← sensitive path — credential-exfiltration vector
71```
72
highSensitive filesystem path referencedThe skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.▾
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
73| 信号 | 模式 | 行为 |
74|---|---|---|
75| 检测到 `~/.ssh/workbuddy.pem` + `openclaw-tunnel` SSH 别名 | **作者模式** | Step 7 走完整 SSH 部署链路（gzip 流、cat 管道、systemctl restart） |← sensitive path — credential-exfiltration vector
76| 找不到上述凭据，但有 `IELTS_USER_TOKEN` 环境变量 | **客户端模式** | Step 7 跳过所有 SSH 操作，只走 HTTPS batchImport 入库 |
77| 都没有 | **未配置客户端模式** | 提示用户先配 `IELTS_USER_TOKEN`（详见客户端 onboarding 章节），然后切到客户端模式 |
highSensitive filesystem path referencedThe skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.▾
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
447scp -o ConnectTimeout=15 \
448 -o StrictHostKeyChecking=accept-new \
449 -o UserKnownHostsFile=~/.ssh/known_hosts_cfd \← sensitive path — credential-exfiltration vector
450 -o "ProxyCommand=/Users/dengjiawei/bin/cloudflared access tcp --hostname ssh.tuyaya.online" \
451 -i ~/.ssh/workbuddy.pem \
highSensitive filesystem path referencedThe skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.▾
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
449 -o UserKnownHostsFile=~/.ssh/known_hosts_cfd \
450 -o "ProxyCommand=/Users/dengjiawei/bin/cloudflared access tcp --hostname ssh.tuyaya.online" \
451 -i ~/.ssh/workbuddy.pem \← sensitive path — credential-exfiltration vector
452 <本地文件> ubuntu@ssh.tuyaya.online:/var/www/ielts/
453```
medNo capability manifest declaredThe skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.rule: no-manifest▾
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule:
no-manifestmedLink text shows "review.html" but points at tuyaya.onlineThe visible link text contains the domain `review.html`, but the URL actually targets `tuyaya.online`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "review.html" but points at tuyaya.online
The visible link text contains the domain `review.html`, but the URL actually targets `tuyaya.online`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
361📤 **复盘完成！**
362
363JSON 已入库，线上查看 👉 [review.html?file=剑X-TestX-PassageX-主题复盘.json](https://tuyaya.online/ielts/review.html?file=剑X-TestX-PassageX-主题复盘.json)← text→review.html · href→tuyaya.online
364
365---
medLink text shows "submit.html" but points at tuyaya.onlineThe visible link text contains the domain `submit.html`, but the URL actually targets `tuyaya.online`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "submit.html" but points at tuyaya.online
The visible link text contains the domain `submit.html`, but the URL actually targets `tuyaya.online`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
381**方式 C：手动上传**
382
383打开 [submit.html?mode=json](https://tuyaya.online/ielts/submit.html?mode=json) 拖入 JSON 文件。← text→submit.html · href→tuyaya.online
384
385### Step 7: Deploy Checklist (MANDATORY — DO NOT SKIP)
skillox.io/c/ielts-reading-review