Claude Code, Skill
skills
GoFrame Skills is an AI skill set tailored for the GoFrame framework, designed to enable AI to produce accurate GoFrame code.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit c22b6e4115e1, unchanged since the check below.
NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
Why this grade
- NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
skills/goframe-v2/examples/httpserver/jwt/README.MD, line 64
curl -X POST http://localhost:8000/login \ - OBFUSCATION_ENCODED_BLOB Low
Contains a long base64 shaped string in a file that should be readable.
skills/goframe-v2/examples/practices/user-http-service/internal/controller/user/user_v1_sign_out.go, line 1
package user
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
skills/goframe-v2/examples/httpserver/jwt/README.MD, line 64
curl -X POST http://localhost:8000/login \
skills/goframe-v2/examples/httpserver/jwt/README.MD, line 71
curl http://localhost:8000/api/protected \
skills/goframe-v2/examples/httpserver/jwt/README.ZH.MD, line 64
curl -X POST http://localhost:8000/login \
Show more
skills/goframe-v2/examples/httpserver/jwt/README.ZH.MD, line 71
curl http://localhost:8000/api/protected \
skills/goframe-v2/examples/httpserver/mcp-http/README.MD, line 59
curl -X POST http://localhost:8080/mcp \
skills/goframe-v2/examples/httpserver/mcp-http/README.ZH.MD, line 59
curl -X POST http://localhost:8080/mcp \
skills/goframe-v2/examples/httpserver/rate-limit/README.MD, line 53
curl "http://127.0.0.1:8080/hello?name=world"
skills/goframe-v2/examples/httpserver/rate-limit/README.MD, line 56
for i in {1..20}; do curl "http://127.0.0.1:8080/hello?name=world"; done
skills/goframe-v2/examples/practices/mvc-demo-chat/internal/controller/chat.go, line 74
if ws, err = r.WebSocket(); err != nil {
skills/goframe-v2/examples/httpserver/upload-file/static/index.html, line 119
const response = await fetch('/upload', {
skills/goframe-v2/examples/practices/mvc-demo-chat/resource/template/chat/include/chat.html, line 75
var ws = new WebSocket(url);
skills/goframe-v2/references/WEB服务开发/高级特性/WebSocket服务.md, line 45
let ws = new WebSocket(url);
skills/goframe-v2/references/WEB服务开发/高级特性/WebSocket服务.md, line 183
`websocket` 服务端的路由注册方式和普通的 `http` 回调函数注册方式一样，但是在接口处理中我们需要通过 `ghttp.Request.WebSocket` 方法（这里直接使用指针对象 `r.WebSocket()`）将请求转换为 `websocket` 操作，并返回一个 `WebSocket对象`，该对象用于后续的 `websocket` 通
skills/goframe-v2/references/WEB服务开发/高级特性/WebSocket服务.md, line 257
1. `origin` 的校验: 业务层在执行 `r.WebSocket()` 之前需要进行 `origin` 同源请求的校验；或者按照自定义的处理对请求进行校验(如果请求提交参数)；如果未通过校验，那么调用 `r.Exit()` 终止请求。
Secrets
Pass
No read of a credential file or secret environment variable found.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
skills/goframe-v2/examples/practices/user-http-service/internal/controller/user/user_v1_sign_out.go, line 1
package user
skills/goframe-v2/references/核心组件/资源管理/资源管理-方法介绍.md, line 22
if err := gres.Add("H4sIAAAAAAAC/5TWV1TTydsH8B+EpoAginEBDVIEQYp0kUTpSjAJhCwsxSwlgEtRwVCkKwJSo9IWCCChSAkoTZoivfeF0JEEQpMgvQrvcc/x1X/Zi/9zMTfzzPfMc/OZQcFBLKcBDoAD6DTsRQE/FS9wDLC/64xz
Licence
Note
no licence file found.
LICENCE_MISSING
No file path was stored.
no licence file found.
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit c22b6e4115e1. can reach a host that is not written as a fixed address. contains an encoded blob in a file that should be readable. no licence file found.
Date and source
Date checked:
github.com
Commit graded: c22b6e4115e1a3747676419bba98fee99af6beff
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.