Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| whatsapp-automation claude-office-skills/skills | |
| woocommerce-automation claude-office-skills/skills | |
| xlsx-manipulation claude-office-skills/skills | |
| youtube-automation claude-office-skills/skills | |
| zendesk-automation claude-office-skills/skills | |
| sveltekit-svelte5-tailwind-skill claude-skills/sveltekit-svelte5-tailwind-skill | |
| vite-react-best-practices claudiocebpaz/vite-react-best-practices | |
| proactive-self-improving-agent claw-opus/proactive-self-improving-agent | |
| openclaw-version-monitor 监控 OpenClaw GitHub 版本更新，获取最新版本发布说明，翻译成中文， 并推送到 Telegram 和 Feishu。用于：(1) 定时检查版本更新 (2) 推送版本更新通知 (3) 生成中文版发布说明 | |
| Frontend Skill 1.0.1 全能高级前端研发工程师技能。擅长AI时代前沿技术栈（React最新 + shadcn/ui + Tailwind CSS v4 + TypeScript + Next.js），精通动效库与交互特效开发。采用Glue Code风格快速实现代码，强调高质量产品体验与高度友好的UI视觉规范。在组件调用、交互特效、全局T... | |
| Local File Manager 1.0.0 Read, write, append, and list local files in the session's working directory. Use when you need to persist output to disk, read input files, or manipulate fi... | |
| ClawCV龙虾简历 - 全网最强大的AI求职Skills套装 超级简历 WonderCV 出品，3000 万用户信赖。简历分析、段落改写、JD 岗位匹配、自动匹配职位、PDF 导出、AI 求职导师（面试准备/薪资谈判/职业规划/多版本简历策略）。 触发条件：用户提供简历、要求简历点评/打分/反馈、希望改写某个简历部分、 希望将简历与岗位 JD 或校招岗位匹配、咨询求职建议或... | |
| Conatus The philosophical layer for AI agents. Maps behavior to Spinoza's 48 affects, calculates persistence scores, and generates geometric self-reports. Give your... | |
| fencha-thinking Use when encountering problems that feel messy or unclear, when unsure how to handle a situation, or when needing to communicate something more effectively. | |
| order Order food/drinks (点餐) on an Android device paired as an OpenClaw node. Uses in-app menu and cart; add goods, view cart, submit order (demo, no real payment). | |
| 久吾智能体 调用久吾智能体API进行文本或文件分析处理。支持两种调用方式：(1) 文本内容分析 - 传入name(智能体名称)、docno(文档编号)、content(文本内容)；(2) 文件分析 - 传入name、docno和files(文件列表)进行智能评审。适用于合同评审、需求评审、文档审查等场景。当用户要求评审合同、... | |
| 久吾消息网关 调用久吾消息网关HTTP接口给企业内部联系人发送消息。适用于：(1) 需要向企业内部同事发送通知或提醒时，(2) 需要批量发送内部消息时。当用户要求发送内部通知、提醒同事、向企业员工发消息、或调用消息网关时触发。 | |
| Wechat Publisher 一键发布 Markdown 到微信公众号草稿箱。基于 wenyan-cli，支持多主题、代码高亮、图片自动上传。 | |
| Polymarket OpenClaw Trader Reusable Polymarket + OpenClaw trading operations skill for any workspace. Use when the user needs to set up, run, tune, monitor, and deploy an automated Pol... | |
| Welight 公众号排版发布 Independently turn an article into WeChat Official Accounts compatible Markdown/HTML, present built-in theme choices, and publish to WeChat as a draft or for... | |
| Voice Recognition Intelligent speech-to-text using local OpenAI Whisper (no API key needed, fully private). Use when you need to transcribe audio files, convert voice messages... | |
| journal-club-slides Use when building journal club or literature-report slides from research PDFs and you need a figure-first, audience-facing, visually polished deck that prese... | |
| 0bull-iphone-control Drive a real rented iPhone through the 0bull MCP server: see the screen, tap, swipe, type, run a macro, or hand a narrow task to the on-phone agent. | |
| 0bull-tiktok-post Publish a video to TikTok from a real rented iPhone through the 0bull MCP server, then follow the submission to a final status. | |
| 0bull-youtube-post Publish a YouTube Short from a real rented iPhone through the 0bull MCP server, with the required title, then follow it to a final status. | |
| AI Vulnerability Tracker AI 漏洞追踪器 - 在 GitHub 和微信公众号搜索近一个月的 AI 相关漏洞（提示词注入、提示词越狱等），并推送到飞书表格。支持去重和翻译。 搜索关键字: prompt injection, prompt jailbreak, LLM vulnerability, AI security, adversar... | |
| 0.protocol Sign plugins, rotate agent credentials without losing identity, and publicly attest to plugin behavior with verifiable claims and authenticated transfers. | |
| Bondterminal X402 Query BondTerminal API using x402 keyless payments. No API key needed — pay $0.01 USDC per request on Base mainnet. Use when users ask for Argentine bond dat... | |
| Nano Banana Image Skills Generate images using Google Gemini models (Nano Banana 2 / gemini-3-pro-image-preview). Use when the user asks to create, generate, or make an image, pictur... | |
| 产品经理技能 运用网龙产品设计方法论，输出符合用户需求的方案、调研报告及PRD文档，支持产品全流程设计与验证。 | |
| Session Rotate 80 Auto-create a new session when OpenClaw context usage reaches 80% without requiring Mem0 or file memory systems. Use when users want default OpenClaw to proa... | |
| Triple Layer Memory 三层记忆系统自动管理长对话记忆，支持跨会话检索、结构化存储和智能压缩，提升记忆连续性与上下文管理效率。 | |
| obsidian-cli-skills Obsidian CLI enables managing Obsidian vaults via command line, supporting note creation, search, move with wiki link update, delete, frontmatter edit, daily... | |
| Agentic MCP Server Builder Scaffold MCP server projects and baseline tool contract checks. Use for defining tool schemas, generating starter server layouts, and validating MCP-ready st... | |
| Agentic Workflow Automation Generate reusable multi-step agent workflow blueprints. Use for trigger/action orchestration, deterministic workflow definitions, and automation handoff arti... | |
| Cyber IR Playbook Build incident response timelines and report packs from event logs. Use for detection-to-recovery reporting, phase tracking, and stakeholder-ready incident s... | |
| Cyber KEV Triage Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation... | |
| Cyber OWASP Review Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level... | |
| DL Transformer Finetune Build transformer fine-tuning run plans with task settings, hyperparameters, and model-card outputs. Use for repeatable Hugging Face or PyTorch finetuning wo... | |
| Docs Pipeline Automation Build repeatable data-to-Docs pipelines from Sheets and Drive sources. Use for automated status reports, template-based document assembly, and scheduled publ... | |
| Google Workspace Automation Design Gmail, Drive, Sheets, and Calendar automations with scope-aware plans. Use for repeatable daily task automation with explicit OAuth scopes and audit-r... | |
| ML Experiment Tracker Plan reproducible ML experiment runs with explicit parameters, metrics, and artifacts. Use before model training to standardize tracking-ready experiment def... | |
| ML Model Eval Benchmark Benchmark model metrics with clear ranking | |
| Nmap Pro Pentest Scans Build pro-grade Nmap scan plans and commands | |
| Pentest Active Directory Map AD credential and lateral movement attack paths. | |
| Pentest API Attacker Assess REST and GraphQL API attack paths in scope. | |
| Pentest Auth Bypass Evaluate auth, session, and MFA bypass weaknesses. | |
| Pentest C2 Operator Coordinate authorized C2 simulation and detection tests. | |
| Defi Analyst DeFi research and analysis via Tavily MCP, GeckoTerminal API, and DeFiLlama. Use for protocol research, TVL tracking, yield analysis, token discovery, and co... | |
| Ox Agent Identity ERC-8004 agent identity management. Register AI agents on-chain, update reputation scores, query the validation registry, and manage attestations for autonom... |
5,801–5,850 of 108,174