gingiris-launch
github.com/clawhub.ai/gingiris-launch
Scanned Thu, 28 May 2026 15:48:16 GMT
Scan ID crawl-giezifuv145e9uo57qic0t2x · 2ms
C
SCORE 55 / 100
Verdict: Proceed with caution

8 medium findings.

This skill ships without a capability manifest plus 7 other issues listed below.

0 critical0 high8 medium4 rules passed

Why grade C?

score · 55 / 100

The current grade reflects 8 medium findings (6+ MEDs → C).

0 CRIT0 HIGH8 MED0 LOW
To reach a higher grade
  • B
    Reach Btarget score 75

    Resolve 3 of 8 MED (cap is 5).

  • A
    Reach Atarget score 95

    Resolve 6 of 8 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Findings · ordered by severity

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
med
Link text shows "strategy.md" but points at github.com
The visible link text contains the domain `strategy.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 49CWE-601
47| 主题 | 文件 |
48|:---|:---|
49| 核心策略与案例 | [references/strategy.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/strategy.md) |text→strategy.md · href→github.com
50| 准备阶段 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/preparation.md) |
51| Product Launch | [references/product-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/product-launch.md) |
med
Link text shows "preparation.md" but points at github.com
The visible link text contains the domain `preparation.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 50CWE-601
48|:---|:---|
49| 核心策略与案例 | [references/strategy.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/strategy.md) |
50| 准备阶段 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/preparation.md) |text→preparation.md · href→github.com
51| Product Launch | [references/product-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/product-launch.md) |
52| Product Hunt 发布 | [references/ph-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/ph-launch.md) |
med
Link text shows "product-launch.md" but points at github.com
The visible link text contains the domain `product-launch.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 51CWE-601
49| 核心策略与案例 | [references/strategy.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/strategy.md) |
50| 准备阶段 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/preparation.md) |
51| Product Launch | [references/product-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/product-launch.md) |text→product-launch.md · href→github.com
52| Product Hunt 发布 | [references/ph-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/ph-launch.md) |
53| 渠道内容模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/templates.md) |
med
Link text shows "ph-launch.md" but points at github.com
The visible link text contains the domain `ph-launch.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 52CWE-601
50| 准备阶段 SOP | [references/preparation.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/preparation.md) |
51| Product Launch | [references/product-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/product-launch.md) |
52| Product Hunt 发布 | [references/ph-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/ph-launch.md) |text→ph-launch.md · href→github.com
53| 渠道内容模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/templates.md) |
54| 工具箱 | [references/tools.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/tools.md) |
med
Link text shows "templates.md" but points at github.com
The visible link text contains the domain `templates.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 53CWE-601
51| Product Launch | [references/product-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/product-launch.md) |
52| Product Hunt 发布 | [references/ph-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/ph-launch.md) |
53| 渠道内容模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/templates.md) |text→templates.md · href→github.com
54| 工具箱 | [references/tools.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/tools.md) |
55| 预算分配 | [references/budget.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/budget.md) |
med
Link text shows "tools.md" but points at github.com
The visible link text contains the domain `tools.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 54CWE-601
52| Product Hunt 发布 | [references/ph-launch.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/ph-launch.md) |
53| 渠道内容模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/templates.md) |
54| 工具箱 | [references/tools.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/tools.md) |text→tools.md · href→github.com
55| 预算分配 | [references/budget.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/budget.md) |
56
med
Link text shows "budget.md" but points at github.com
The visible link text contains the domain `budget.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 55CWE-601
53| 渠道内容模板 | [references/templates.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/templates.md) |
54| 工具箱 | [references/tools.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/tools.md) |
55| 预算分配 | [references/budget.md](https://github.com/Gingiris-1031/gingiris-launch/blob/main/references/budget.md) |text→budget.md · href→github.com
56
57---
Scan another →Share
skillox.io/r/crawl-giezifuv145e9uo57qic0t2x