Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| YTLong Daily Report Automatically generate daily/weekly work reports from git commits, calendar events, and task lists. Use when you need to quickly create professional work rep... | |
| clinstagram Full Instagram CLI — posting, DMs, stories, analytics, followers, hashtags, likes, comments. Supports Meta Graph API (official, safe) and private API (full f... | |
| Web Search API Web/News/Finance/Video/Maps/Hotels/Flights search tool based on SearchAPI (Google). Supports time filtering, ideal for agents to get real-time web information. | |
| WebSearchAPI 网页/新闻/财经/视频/地图/酒店/航班搜索工具,基于 SearchAPI (Google)。支持多种搜索类型,适合 Agent 获取实时网络信息。 | |
| data-analysis-partner 智能数据分析 Skill,输入 CSV/Excel 文件和分析需求,输出带交互式 ECharts 图表的 HTML 自包含分析报告 | |
| Cloudflare Manager Manage Cloudflare DNS records, Tunnels (cloudflared), and Zero Trust policies. Use for pointing domains, exposing local services via tunnels, and updating in... | |
| File Organizer Skill Organize files in directories by grouping them into folders based on their extensions or date. Includes Dry-Run, Recursive, and Undo capabilities. | |
| Guardian Wall Mitigate prompt injection attacks, especially indirect ones from external web content or files. Use this skill when processing untrusted text from the intern... | |
| Human Writing Guidelines and standards for professional, human-like writing and documentation. Use this skill when generating READMEs, technical documentation, code commen... | |
| Mema Brain Mema's personal brain - SQLite metadata index for documents and Redis short-term context buffer. Use for organizing workspace knowledge paths and managing ep... | |
| Mema Vault Secure credential manager using AES-256 (Fernet) encryption. Stores, retrieves, and rotates secrets using a mandatory Master Key. Use for managing API keys,... | |
| Memory Cache High-performance temporary storage system using Redis. Supports namespaced keys (mema:*), TTL management, and JSON serialization for session context and API... | |
| Mermaid Architect Generate beautiful, hand-drawn Mermaid diagrams with robust syntax (quoted labels, ELK layout). Use this skill when the user asks for "diagram", "flowchart", "sequence diagram", or "visualize this process". | |
| Newman Automated API testing with Postman collections via Newman CLI. Use when user requests API testing, collection execution, automated testing, CI/CD integration, or mentions "Postman", "Newman", "API tests", "run collection", or "automated tes | |
| Node Red Manager Manage Node-RED instances via Admin API or CLI. Automate flow deployment, install nodes, and troubleshoot issues. Use when user wants to "build automation", "connect devices", or "fix node-red". | |
| Pihole Ctl Manage and monitor local Pi-hole instance. Query FTL database for statistics (blocked ads, top clients) and control service via CLI. Use when user asks "how many ads blocked", "pihole status", or "update gravity". | |
| Search Cluster Aggregated search aggregator using Google CSE, GNews RSS, Wikipedia, Reddit, and Scrapling. | |
| Security Guardian Automated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides... | |
| Stability Ai Generate high-quality images via Stability AI API (SDXL, SD3, Stable Image Core). Use when user asks to "generate image", "make a picture", or "draw this". | |
| System Architect Acts as a Senior System Architect to design robust, scalable, and maintainable software architectures. Enforces industry standards (PEP 8 for Python, ESLint for JS/TS), modular design, and security best practices. Use this skill when the us | |
| Time Checker Check accurate current time, date, and timezone information for any location worldwide using time.is. Use when the user asks "what time is it in X", "current time in Y", or needs to verify timezone offsets. | |
| Publish Skill Final Design beautiful interfaces using 16+ design systems including Material You, Fluent Design, Apple HIG, Ant Design, Carbon Design, Shopify Polaris, Minimalism... | |
| Yt Dlp A robust CLI wrapper for yt-dlp to download videos, playlists, and audio from YouTube and thousands of other sites. Supports format selection, quality control, metadata embedding, and cookie authentication. | |
| Trending News Aggregator 智能热点新闻聚合器 - 自动抓取多平台热点新闻, AI分析趋势,支持定时推送和热度评分。 核心功能: - 每天自动聚合多平台热点(微博、知乎、百度等) - 智能分类(科技、财经、社会、国际等) - 热度评分算法 - 增量检测(标记新增热点) - AI趋势分析 | |
| ClickHouse GitHub Forensics Query GitHub event data via ClickHouse for supply chain investigations, actor profiling, and anomaly detection. Use when investigating GitHub-based attacks,... | |
| AI Dating - Making Friends or Finding a Partner Direct dating and matchmaking workflow via curl against the dating HTTP API. Use when users ask to make friends, find a partner, date, run matchmaking, xiang... | |
| Clawrouter Hosted-gateway LLM router — save 67% on inference costs. A local proxy that forwards each request to the blockrun.ai gateway, which routes to the cheapest ca... | |
| Btc Sovereign Tracker Track BTC self-custody metrics — COLDCARD Q vault health, mempool fee estimation, UTXO management, and on-chain verification. Designed for sovereign holders... | |
| Bug Bounty Pipeline Automated Hunter-Killer pipeline — BlackArch recon + CVE-MCP enrichment → human-verified exploits → bug bounty payouts. Orchestrates the full vulnerability d... | |
| Cve Tracker Automated CVE monitoring and alerting for tech stacks — NVD/NIST API integration, CVE-MCP enrichment, EPSS scoring, KEV catalog tracking. Daily digests with... | |
| Gdpr Checker GDPR compliance audit for ZK-Bankir — data minimization verification, encryption audit, right-to-delete workflows, privacy policy validation, and data export... | |
| Gdpr Security Auditor Technical GDPR compliance audit — data mapping, encryption verification, access control review, data retention analysis, DPIA templates, and cross-border tra... | |
| Incident Responder Playbook-driven incident response — MITRE ATT&CK mapping, evidence collection, timeline reconstruction, containment procedures, and post-incident reporting.... | |
| Osint Investigator Open-source intelligence gathering with theHarvester, recon-ng, Maltego, and SpiderFoot. Domain recon, email harvesting, DNS mapping, and threat actor profil... | |
| Security Hardener Harden a ZK-Bankir sovereign banking deployment — threat model audit, hash-chain integrity, dependency scanning, access control review, and runbook validatio... | |
| Vulnerability Scanner Automated vulnerability scanning with OpenVAS + BlackArch tools, enriched with CVE-MCP data. Full network, web app, and container scans with prioritized reme... | |
| Zk Bankir Monitor Monitor a ZK-Bankir sovereign banking treasury via API — health checks, balance queries, decision ledger tracking, and hash-chain verification. | |
| 1coos-calendar-cn 查询中国传统日历/黄历信息。TRIGGER when user asks about Chinese calendar, lunar date, 农历, 黄历, 万年历, 节气, 五行, 宜忌, 干支,佛历,道历等。 | |
| 1coos-markdown-converter Convert files to beautifully formatted Markdown. TRIGGER when user asks to convert a file to Markdown, extract text from PDF/DOCX/PPTX/XLSX, or format a docu... | |
| 1coos-quickie Quickly save web content as formatted Markdown. TRIGGER when user pastes a URL and wants to save/clip it, read-later, or extract content from YouTube, Twitte... | |
| Get Today Connections Fetch today's NYT Connections puzzle answers and hints. Trigger this skill when the user asks for "today's Connections answers", "today's connections hints",... | |
| Google Seo Assistant A client-facing SEO assistant grounded in Google's official SEO Starter Guide. Use this skill whenever a user mentions SEO, search rankings, Google visibilit... | |
| AI-as-a-Service ROI Calculator Calculate ROI for AI-as-a-Service (managed AI agents). Estimates cost savings, efficiency gains, and payback period for deploying AI agents across business o... | |
| Accessibility Engine Helps teams achieve WCAG 2.1 AA compliance by auditing and guiding inclusive design for web, mobile, desktop, and other digital products. | |
| Accounts Payable Automation Automate accounts payable with invoice processing, approval routing, payment optimization, vendor management, month-end close, key metrics, and fraud prevent... | |
| Accounts Receivable Manager Automate accounts receivable: aging reports, prioritize collections, draft payment reminders, match payments, track DSO, and forecast bad debt exposure. | |
| Ad Ops & Cross-Channel Advertising Agent Manages and optimizes cross-channel ad campaigns autonomously with planning, auditing, budget allocation, and performance reporting across major platforms. | |
| Agency Command Center Complete agency operations system — client lifecycle, pricing, project delivery, team management, and growth strategy for service businesses. | |
| Agent Engineering Design, build, deploy, and operate production AI agent systems — single agents, multi-agent teams, and autonomous swarms. Complete methodology from agent arc... | |
| AI Agent Manager Playbook Provides a comprehensive framework to manage autonomous AI agents, including portfolio oversight, performance monitoring, escalation protocols, governance, a... |
6,551–6,600 of 108,174