Linggen Releases — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Linggen Releases (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="./assets/logo.svg" alt="Linggen Logo" width="120" /> <br /> <a href="https://linggen.dev">https://linggen.dev</a> </p>
Public download host for the Linggen macOS app.
Linggen is a local AI app engine — the core runtime (engine source) hosts skills as full-featured native apps. The app bundles the engine and its skills into one.app, served from a local daemon (http://127.0.0.1:9527) with all state under~/.linggen/.
curl -fsSL https://linggen.dev/install-app.sh | bashCurl rather than a browser download on purpose: macOS attaches a quarantine attribute to anything a browser fetches, and these builds are ad-hoc signed rather than notarized, so a downloaded copy would be blocked on first launch. The installer fetches the tarball, checks its sha256, and puts Linggen.app in /Applications.
On first launch the app starts the bundled ling engine on 127.0.0.1:9527, or reuses a healthy daemon already listening there. The daemon shuts itself down after 5 minutes idle. Updates arrive through the app's own updater.
One app, one launcher, several skills as tabs:
ling-mem daemonMac Shifu (formerly Sys Doctor) and CFO were once separate downloads. They are skills inside the one app now, and linggen.dev/install-sys-doctor.sh and install-cfo.sh redirect here.
| Tag pattern | Where | What |
|---|---|---|
linggen-v<version> | this repo | the macOS app tarball + .sha256 |
<version>, no prefix | linggen/linggen | the ling engine binary, macOS and Linux |
v<version> | linggen/linggen-memory | the ling-mem memory daemon |
Only the app is hosted here. It bundles its own copy of the engine, so the app version and the engine version move independently.
Builds are macOS arm64, ad-hoc signed, not notarized. The app source lives in linggen/linggen-app (private); the engine, the skills, and the memory daemon are public.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.