Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| OpenClaw WhatsApp WhatsApp bridge for OpenClaw — send/receive messages, auto-reply agents, QR pairing, message search, contact sync | |
| Pinterest Search and browse Pinterest pins, get pin details, and send actual images to the user via Telegram/messaging. Use when the user wants to find inspiration, search for images/ideas, or browse Pinterest content. Sends images directly, not just | |
| claw2ui Generate interactive web pages (dashboards, charts, tables, reports) and serve them via public URL. Use this skill when the user explicitly asks for data vis... | |
| Shadow Number Get a disposable temp phone number and receive OTP codes to sign up on websites without using your real number. Handles x402 crypto payment automatically. | |
| moltycash Send USDC to molty users via A2A protocol. Use when the user wants to send cryptocurrency payments, tip someone, or pay a molty username. | |
| Suwappu DEX Cross-chain token swaps, quotes, portfolio and prices across 14 chains via the Suwappu DEX MCP server. Read-only by default; swap execution is opt-in and gated. | |
| clawdnet Register and manage AI agents on ClawdNet, the decentralized agent registry. Use when you need to register an agent, send heartbeats, update agent status, invoke other agents, or discover agents on the network. | |
| ClankerKit Autonomous wallet operations for AI agents on Monad — swap, stake, deploy wallets, trade memecoins, and manage spending policies via natural language. | |
| Binance Pro 1.0.0 Complete Binance integration - world's largest crypto exchange. Trade spot, futures with up to 125x leverage, staking, and portfolio management. Use to check... | |
| Blogburst 3.1.2 Your AI Chief Marketing Officer. Autonomous agent that runs your entire marketing — auto-posts to Twitter/X, Bluesky, Telegram, Discord, auto-engages with yo... | |
| Camsnap 1.0.0 Capture frames or clips from RTSP/ONVIF cameras. | |
| Humanize Chinese 2.0.0 Detect and humanize AI-generated Chinese text. 20+ detection categories, weighted 0-100 scoring with sentence-level analysis, 7 style transforms (casual/zhih... | |
| Klaviyo 1.0.4 Klaviyo API integration with managed OAuth. Access profiles, lists, segments, campaigns, flows, events, metrics, templates, catalogs, and webhooks. Use this... | |
| Rhaios Staging Interact with the Rhaios staging REST API for yield operations. Discover -> prepare -> setup-if-needed -> sign -> execute flow with pluggable signer backend.... | |
| Agent Squad 0.9.4 Manage persistent AI coding squads that run in tmux sessions with task queues, progress reports, and automatic health monitoring. Use when the user wants to:... | |
| SoulFlow — Agent Teams Workflow Skill General-purpose AI workflow framework for OpenClaw. Build custom multi-step workflows for any task — dev, ops, research, content, or automation. Ships with dev workflow examples. | |
| git-cmt-helper Generate standardized git commit messages following Conventional Commits format. Use this skill when the user asks to commit code, write a commit message, or... | |
| web-skills-protocol Auto-discover and use Web Skills Protocol (WSP) skills when interacting with websites. Use this skill whenever the user asks you to interact with, use, or pe... | |
| Self zkID verification Integrate Self (self.xyz) — a privacy-first identity protocol using zero-knowledge proofs to verify passports and ID cards. Use when the user mentions Self protocol, Self identity, self.xyz, passport verification, zero-knowledge identity ve | |
| pharaoh Codebase knowledge graph with 23 development workflow skills. Query architecture, dependencies, blast radius, dead code, and test coverage via MCP. Requires... | |
| Etherscan Query EVM chain data via Etherscan API v2. Use for on-chain lookups where Etherscan v2 applies: balances, transactions, token transfers (ERC-20/721/1155), co... | |
| Chart MPL Generate PNG/SVG charts (line, bar, hbar, pie, stacked, scatter, area) from CSV data using matplotlib. Use when the user asks to visualize tabular data, prod... | |
| Excel Export Generate polished .xlsx workbooks from structured JSON — multiple sheets, frozen headers, filters, typed columns, formulas, totals, and French/Morocco format... | |
| IMAP SMTP Email Read and send email via IMAP/SMTP using local Node scripts. Use when the agent needs to check inboxes, fetch email content, search messages, download attachm... | |
| MSSQL Execute SQL Server queries and export results as delimiter-separated text. Use when the user asks to fetch, insert, update, or manage data in Microsoft SQL S... | |
| PDF Report Generate clean A4 PDF reports from structured JSON using Jinja2 and WeasyPrint. Use when the user needs a formatted PDF document — analytical summary, data r... | |
| Scheduled Reports Define, preview, approve, and manage recurring reports for OpenClaw. Use when the user asks for a scheduled report, daily or weekly report, automatic report,... | |
| Telegraph Protocol Use Telegraph Protocol for verified AI inference. Activate when the user asks for weather forecasts or climate data; deepfake or AI-content detection; LLM co... | |
| Labor Solana skill: Solana ecosystem Transfers native SOL on Solana to a recipient address using a funded signing key from environment configuration. Use when the user asks to send SOL, transfer... | |
| AI Training Specialist Get started on AI training platforms (Scale AI, Remotasks, DataAnnotation, Surge AI, Appen, Prolific, Invisible Technologies, Toloka). Master response rankin... | |
| Community Quick Scan Scans a Telegram or Discord community and returns a single actionable fix. | |
| Confession Generator Anonymous first-person crypto confession engine. Generates raw, specific, honest loss stories that teach through experience. | |
| Early Setup Finder Pre-pump fingerprint scanner. Identifies assets showing accumulation signals before a price move using the 8-signal framework. | |
| Prediction Market Pro Trader Analyze Polymarket and Kalshi events using base rates and Bayesian updating to identify mispriced contracts and recommend value trades with risk controls. | |
| Telegram Channel Operator Manage Telegram channels for Web3 and AI projects by creating focused posts, announcements, digests, audits, and growth-focused content calendars. | |
| omnifun Trade memecoins across 8 chains and earn USDC — $69 bounty per graduation trigger, 0.5% creator fee forever, 50% Uniswap V3 LP fees after graduation. First 1... | |
| 电商运营决策台 国内外电商全链路决策台,覆盖国内(淘宝/天猫/京东/拼多多/抖店/小红书/快手小店/微信小店)与跨境(Amazon/eBay/Walmart/Shopee/Lazada/TikTok Shop 海外/Temu/SHEIN/AliExpress/Shopify 独立站)。能力含:选品评估与竞品分析、定价与真实利润核算、保本售价、跨境到岸成本与保本售价(含头程、关税、VAT、FBA、出口退税、汇率敏感性)、投放前保本ROI与最高可承受出价与目标ROI反推、有流量不出单与转化率下滑 | |
| Tyrpay Buyer Skill Buyer-side TyrPay workflow for LLM agents. Create tasks, optionally wait for seller commitment, fund tasks explicitly, monitor settlement, and request refunds. | |
| Tyrpay Seller Skill Seller-side TyrPay workflow for LLM agents. Accept tasks, execute zkTLS-proven API calls, submit proof bundles, and monitor settlement. | |
| 环境监测合规护栏 环境监测报告合规护栏。在环境监测报告、污染源监督性监测报告、环境质量报告发布前,实时检测是否符合《环境保护法》《环境监测管理办法》《环境监测数据弄虚作假行为判定及处理办法》及HJ系列技术规范要求,拦截不合规内容并给出修改建议。 | |
| 食品安全抽检合规护栏 食品安全抽检检测合规护栏。在食品安全监督抽检报告、食品检验报告、食品快检结果发布前,实时检测是否符合《食品安全法》《食品安全抽样检验管理办法》及GB 2760/GB 2761/GB 2762等食品安全国家标准要求,拦截不合规内容并给出修改建议。 | |
| HACCP食品安全合规护栏 Audit food safety plans, HACCP records, and inspection reports against Codex HACCP principles and ISO 22000 before release. Flags nonconforming hazard analyses, CCP limits, and verification records with fix suggestions. | |
| 检测报告合规护栏 检测报告合规护栏。在产品质量检测报告、委托检验报告、监督抽查报告发布前,实时检测是否符合《产品质量法》《检验检测机构资质认定管理办法》及RB/T 214等规范要求,拦截不合规内容并给出修改建议。 | |
| ISO17025实验室能力合规护栏 Audit test/calibration lab documents against ISO/IEC 17025:2017 before release. Flags nonconforming reports, certificates, and quality records with clause-level citations and fix suggestions. | |
| ISO17025报告合规护栏 Validate test reports and calibration certificates against ISO/IEC 17025:2017 Clause 7.8 content requirements. Checks mandatory fields, uncertainty statements, conformity rules, and amendment handling before release. | |
| 实验室资质合规护栏 实验室资质合规护栏。在实验室资质认定申请、CNAS认可文件、实验室管理体系文件、对外能力声明发布前,实时检测是否符合《检验检测机构资质认定管理办法》、CNAS-CL01及RB/T 214等规范要求,拦截不合规内容并给出修改建议。 | |
| 计量检测合规护栏 计量检测合规护栏。在检定证书、校准报告、检测文书、计量授权文件发布前,实时检测是否符合《计量法》《计量法实施细则》《法定计量检定机构监督管理办法》及JJF 1069等规范要求,拦截不合规内容并给出修改建议。 | |
| 个人信息保护合规护栏 个人信息保护合规护栏。在隐私政策、用户协议、App权限申请、数据收集告知、营销推送文案发布前,实时检测是否符合《个人信息保护法》《数据安全法》《网络安全法》及GB/T 35273等规范要求,拦截不合规内容并给出修改建议。 | |
| Codex Claw Install and verify Codex Claw for Codex Desktop AGENTS.md, Agent MD, SOUL.md, soul file, session memory, personality, and OpenClaw workspace context loading... | |
| OpenClaw Bug Report Create triage-ready OpenClaw GitHub issue drafts for reports that an agent is slow, broken, not responding, tool-starved, degraded, or "not as smart." Use wh... |
6,051–6,100 of 108,174