Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| Schopenhauer Wisdom 叔本华《人生的智慧》完整体系 — 幸福三分类、内在决定论、世俗智慧、格言等。276页全本提炼。 | |
| Strict Father 基于紫微斗数12宫和你的出生信息无情剖析,揭示你看不到的自我盲区和命盘缺陷,直指行为瓶颈与真实问题。 | |
| Bou Wallet Use this skill when an external agent already has an agent API key and needs to call this backend directly with curl for three capability groups: (1) `POST /... | |
| Cosin Use this skill when an agent needs to operate the `cosin` CLI from the terminal. `cosin` accepts only relative paths, lists available skills through the `ski... | |
| agent-uptime-keeper Keep always-on agents honestly reachable: register each agent endpoint with an external heartbeat watch, poll its verdict daily, and escalate when it goes dark. Use when running long-lived agents, before promising uptime to a counterparty, | |
| ddg-agent-security-sweep Run one release-time security sweep over an agent's own surfaces: prompt-injection exposure, MCP tool permission boundaries, secret leaks, and dependency risk. Use before tagging a release, after adding a tool, or when a scanner flags your | |
| ddg-payment-rail-verify Prove an agent's payment path still works end to end and keep proving it: a paid smoke test, a 402-envelope pre-flight, and a buyer-side trust probe of the seller you depend on. Use before going live, after changing a wallet or SDK, and as | |
| ddg-site-health-daily Run a daily site health check for any URL list: audit the page, check the URL's reputation, and pull fresh search context, then diff against yesterday. Use when monitoring a site you own or one you are evaluating, before a launch, or when a | |
| evidence-first-done Force evidence before any completion claim: independently re-read each claimed side effect (HTTP state, DNS record, status code) and refuse to report done when a claim does not verify. Use when an agent reports success on external actions, | |
| skill-install-firewall Screen any agent skill or MCP server BEFORE it lands in the fleet: compare the declared manifest against actual behavior, flag injection and credential patterns, and emit a pass/fail verdict with evidence. Use when installing skills from a | |
| auto-context 智能上下文卫生检查器。分析当前会话的上下文污染程度 (长对话、主题漂移、噪声累积),建议:continue、/fork、/btw 或新会话。 支持手动触发(/auto-context)和自动触发(响应层实现)。 基于 ArXiv 论文和认知心理学研究的多维度评估体系。 | |
| memPalace Integration MemPalace记忆系统集成 - AAAK压缩 + Hall分类 + L0-L3分层 30x无损压缩(1000→33 tokens)(1000→33 tokens)(1000→33 tokens)(1000→33 tokens)(1000→33 tokens)(1000→33 tokens),facts/eve... | |
| anti-sycophancy Three-layer sycophancy defense based on ArXiv 2602.23971. Use /anti-sycophancy install to deploy all layers, or manage individually via install-claude-code /... | |
| auto-diary Automatically write daily/weekly/monthly diary summaries and extract insights to auto-learn.md for HexaLoop. | |
| autoresearch-pro Improve an existing agent skill, prompt, article, plugin, workflow, or system mechanism through small reversible edits and same-task before/after comparisons. Use for requested iterative optimization, case-based validation, failure-driven i | |
| browser-cdp Real Chrome browser automation via CDP Proxy — access pages with full user login state, bypass anti-bot detection, perform interactive operations (click/fill... | |
| Cjl Autoresearch Cc Optimize skills, prompts, articles, workflows, or systems via single-step iterative edits with testing and scoring to keep improvements and discard regressions. | |
| Cjl Plugin CJL Skills Collection — a personal Claude Code plugin with 17 production skills. Use when the user wants to: read papers, create content cards, design presen... | |
| Cjl Slides Create stunning HTML presentations in 24 international design styles with strict design rules. Export to .pptx for PowerPoint editing. ## Design Philosophy -... | |
| Company Research Evidence-based company profiles, business models and risk research | |
| Cursor2api Skill Clawhub Manage and deploy cursor2api to convert Cursor IDE AI conversations into Anthropic/OpenAI API formats, including token refresh and uninstallation. | |
| Diagram Drawing Generate high-quality SVG and PNG technical diagrams from natural language, including architecture, flowchart, sequence, UML, mind maps, and AI agent systems. | |
| Handmade Editorial Poster Turn each photo into a quiet handmade editorial poster | |
| humanizer-cn 去除中文文本中的 AI 写作痕迹,使其读起来自然。基于维基百科 AI 写作特征指南,检测 24 种 AI 模式。触发词:humanizer-cn、去除 AI 痕迹、去除 AI 写作痕迹、中文文本人性化。 | |
| justin-sun-writing Create or revise restrained Chinese first-person narratives using credible concrete details, narrator blind spots, recurring objects, and relationship-driven tension. Use for original fiction or supplied personal material; do not use to imp | |
| Markdown → PDF Report Convert Markdown research reports / fact-checks / scheme proposals into styled PDFs with native CJK (Chinese) font support. Markdown is the single source of truth; PDF is generated FROM the Markdown. Triggers on "做个 PDF 报告", "转成 PDF", "调研报告 | |
| merge-drafts Merge two or more drafts or document versions into one coherent text, preserving useful contributions, source attribution, and unresolved conflicts. Use for multi-draft articles, document-version consolidation, or integrating supplied revie | |
| Obsidian Viz Generate Obsidian-compatible visualization files (Excalidraw / Mermaid / Canvas). Supports text descriptions and image inputs, outputs editable diagrams in O... | |
| Open Computer Use MCP Use the local open-computer-use MCP runtime for policy-gated, state-scoped macOS Computer Use. | |
| Perfect Handoff Close out project knowledge and hand a compact, evidence-backed context to a fresh session | |
| Personal Content DNA Capture real decisions and feedback to develop an authentic writing voice | |
| resume-creator Create, make, write, or improve a resume; output valid Reactive Resume JSON or a standalone, deployable single-file HTML resume. Use when a user asks to create a resume, generate a CV, make a resume website, or improve resume content. | |
| Slowmist Security Cc SlowMist AI Agent Security Review — comprehensive security framework for skills, repositories, URLs, on-chain addresses, and products (Claude Code version) | |
| social-org-research Research a B Corp / social enterprise / NGO / youth culture brand. 10-dimension framework, depth: quick|deep switch, case study included. | |
| web-reader-pro Advanced web content extraction skill for OpenClaw using multi-tier fallback strategy (Jina → Scrapling → WebFetch) with intelligent routing, caching, qualit... | |
| x-list-digest On explicit user request, collect authorized X lists over a fixed time window, skip archived posts, classify market viewpoints, produce daily writing reports and weekly off-topic statistics, and optionally archive with the user's native Fei | |
| X Writing DNA Build auditable writing profiles for X accounts from complete public posts and articles. Use for reference-author research, separate short and long-form analysis, and evidence-linked writing practice. | |
| Captcha Relay Human-in-the-loop CAPTCHA solving with two modes: screenshot (default, zero infrastructure) and token relay (requires network access). Screenshot mode captur... | |
| Reddit User Acquisition AI-powered Reddit seeding agent for founders. Analyzes a product spec, maps relevant subreddits, finds real threads where target users need help, drafts pers... | |
| AIPOU Farming Record meaningful AI-assisted work as privacy-preserving AIPOU receipts and claim accumulated AIPOU rewards on Base. Use when a user asks to farm AIPOU, regi... | |
| Propaganda Detects and analyzes propaganda, influence operations, and narrative manipulation in news articles, social media posts, and media narratives. Uses Bloom's Ta... | |
| Iseclaw Intel Indonesian Web3 intelligence via Iseclaw ACP agent. Real-time market data, token signals, TGE research, and GameFi analysis from Southeast Asia's first trans... | |
| Howard Marks' Second Level Thinking Apply Howard Marks' Second Level Thinking framework to investment decisions. Use this skill whenever the user is analyzing an investment opportunity, evaluat... | |
| Smart README Generator Automatically generates professional README.md files with installation, usage, badges, and project overview for Node.js, Python, Rust, and Go projects. | |
| 3d-wordcloud-visualizer 3D 词云可视化工具 - 将对话历史或其他文本数据自动转换为炫酷的 3D 地球词云,支持多格式文件导入(JSON/MD/TXT),自动中文分词和词频统计,生成 TOP30 高频词的 3D 可视化效果 | |
| conversation-exporter 对话历史导出工具 - 将 WorkBuddy 的对话历史导出为多种格式(JSON/Markdown/TXT),包含时间线、元数据、统计数据、成就里程碑和 Skills 使用记录,便于归档分析和分享 | |
| Viralevo Self-evolving viral content trend advisor. Monitors 11 platforms, predicts what to post and when, and improves its own accuracy every week automatically. | |
| Celaut Skill Bridge skill for the Celaut decentralised-compute network — install the Celaut node (nodo), package projects into content-addressed microVM services, execute and observe workloads, and discover on-chain "Unstoppable Skills" via the read-onl | |
| Content Parser Extract and parse content from URLs. Triggers on: user provides a URL to extract content from, another skill needs to parse source material, "parse this URL"... | |
| Explainer Create explainer videos with narration and AI-generated visuals. Triggers on: "解说视频", "explainer video", "explain this as a video", "tutorial video", "introd... |
5,901–5,950 of 108,174