Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| 51mee Job Market Analysis 职位市场分析。触发场景：用户提供职位名称和地区，要求分析职位市场供需、薪资水平、技能趋势。 | |
| 51mee Position Parse 职位解析。触发场景：用户提供职位描述要求解析；用户想分析JD的核心要求。 | |
| 51mee Resume Diagnose 简历诊断。触发场景：用户要求诊断简历质量；用户想优化简历; 用户问我的简历有什么问题。 | |
| 51mee Resume Match 人岗匹配。触发场景：用户要求匹配简历和职位；用户问这个候选人适合这个职位吗；用户要筛选最匹配的候选人。 | |
| 51mee Resume Parse 简历解析。触发场景：用户上传简历文件要求解析、提取结构化信息。 | |
| 51mee Resume Profile 简历画像。触发场景：用户要求生成候选人画像；用户想了解候选人的多维度标签和能力评估。 | |
| bill claw Drives the BillClaw local bookkeeping CLI against SQLite (db/expenses.db) via scripts/main.py JSON subcommands—add/query transactions, delete and category-me... | |
| md2img Convert Markdown (inline text or a `.md` file path) into a single PNG image using local code (Markdown -> HTML -> headless browser screenshot). Use when the... | |
| easy-html-deploy Deploy a single self-contained HTML page to htmlcode.fun for instant sharing. Alias of html-deploy, updated for required descriptions, versioned updates, man... | |
| html-deploy Deploy HTML content or files to the web via htmlcode.fun. Use when the user asks to "deploy to web", "host this html", "generate a live link for this fronten... | |
| html-deploy-easy Instantly publish a single self-contained HTML page to htmlcode.fun for fast live URLs. Alias of html-deploy, updated for the current versioned htmlcode.fun... | |
| html-easy-deploy Instantly deploy a single self-contained HTML page to htmlcode.fun for quick live URLs. Alias of html-deploy, with versioned updates, description-required de... | |
| HTML Markdown Hybrid Combine high-quality Markdown to HTML rendering with robust HTML to Markdown extraction in one skill. Use when converting Markdown into nicer-looking standal... | |
| memory-persistence Multi-backend memory system with optional embedding, private/shared memories, conversation summarization, and maintenance tools. For AI agents to store and r... | |
| wechat-skill Windows 电脑端微信消息发送 MCP，实现在微信上给指定联系人发送消息 | |
| douyin-video-read 读取抖音视频的内容——元信息、官方 AI 章节要点，以及通过逐帧截图 + 字幕 OCR 得到完整口播讲稿。用户分享抖音链接（v.douyin.com / douyin.com/video/xxx）并希望了解视频讲了什么、提取文案、拿到文字稿时使用。触发词：抖音链接、抖音视频、这个视频讲了什么、提取视频文案、抖音视频转文字、视频字幕、看看这个视频、视频内容。 | |
| Account Handoff Builder 将销售到交付的客户信息整理成交接包，识别承诺风险与实施前提。；use for handoff, customer-success, sales-to-cs workflows；do not use for 删掉不利信息, 替代合同文本. | |
| Ai Workflow Red Team Lite 对 AI 自动化流程做轻量红队演练，聚焦误用路径、边界失败和数据泄露风险。；use for red-team, ai, workflow workflows；do not use for 输出可直接滥用的攻击脚本, 帮助破坏系统. | |
| alarm-memo-assistant-pro 一个详细、全面的闹钟与备忘录管理技能。支持提醒、备忘录、待办、日程汇总、当日任务自动推送、重复提醒与高优先级触发词。优先使用 OpenClaw 的 cron / session / file 能力；若宿主没有相应能力，则退化为聊天内记录与人工确认模式。 | |
| Api Contract Auditor 审查 API 文档、示例和字段定义是否一致，输出 breaking change 风险。；use for api, contract, audit workflows；do not use for 直接改线上接口, 替代契约测试平台. | |
| browser-session-curator Turn an overwhelming set of tabs, bookmarks, and snippets into a structured session digest with tasks, reading queue, and archive plan. | |
| Call Scorecard Builder 为销售、客服或访谈通话生成评分维度、观察点与培训反馈模板。；use for scorecard, calls, sales workflows；do not use for 把单次录音当最终定论, 替代正式人力评估. | |
| Case Study Factory 把项目材料转成案例文章，提炼起点、动作、结果和复用价值。；use for case-study, content, storytelling workflows；do not use for 伪造客户背书, 公开敏感数据. | |
| Changelog Curator 从变更记录、提交摘要或发布说明中整理对外 changelog，并区分用户价值与内部改动。；use for changelog, release-notes, docs workflows；do not use for 捏造未发布功能, 替代正式合规审批. | |
| claim-risk-auditor 检查文案、论文、宣传稿或产品说明中的高风险断言，标出证据缺口并给出更稳妥的改写。 | |
| Classroom Lesson Pack 根据课程目标生成教案、互动题、作业与分层教学建议。；use for education, lesson-plan, teaching workflows；do not use for 生成违规内容, 替代教师现场判断. | |
| Clawhub Rate Limited Publisher Fixed Queue and publish local skills to ClawHub with a strict 5-per-hour cap using the local clawhub CLI and host scheduler. | |
| Clinic Visit Prep 帮助患者整理就诊前问题、既往记录、检查清单与时间线，不提供诊断。；use for healthcare, intake, prep workflows；do not use for 给诊断结论, 替代医生意见. | |
| Clipboard Knowledge Capture 把剪贴板片段沉淀到本地知识库，自动补来源、标签和后续行动。；use for clipboard, knowledge, capture workflows；do not use for 保存敏感密钥明文, 忽略来源信息. | |
| collab-offer-polisher 把合作邀约、商务私信、品牌合作需求和合作条款草稿，改写成更专业、更容易推进合作的版本。 | |
| Competitor Message Differ 比较竞品在信息架构和叙事上的差异，找出可借鉴点与应避免模仿点。；use for competitor, messaging, positioning workflows；do not use for 抄袭竞品文案, 编造竞品数据. | |
| Compliance Evidence Assembler 把审计所需证据整理成目录、清单和缺失项，便于后续评审。；use for compliance, evidence, audit workflows；do not use for 伪造证据, 替代正式审计结论. | |
| content-repurpose-studio Transform one source asset into a coordinated pack for multiple channels such as WeChat, Xiaohongshu, TikTok, email, and slides. | |
| contract-redline-navigator Compare draft agreements, highlight risky clause changes, and generate a negotiation checklist with plain-language explanations. | |
| Creator Campaign Planner 规划 KOL/KOC 合作节奏、素材复用、跟进节拍与目标映射。；use for creator, campaign, influencer workflows；do not use for 承诺投放效果, 生成违规投放方案. | |
| Creator Course Outline 为创作者课程生成模块结构、单元目标、作业与里程碑。；use for course, creator, curriculum workflows；do not use for 承诺学员结果, 替代正式教学设计评审. | |
| Crm Next Action 为机会池或客户列表逐条生成下一步动作、跟进理由和不推进原因。；use for crm, next-action, sales workflows；do not use for 伪造客户互动记录, 擅自发消息. | |
| Cron Job Guardian 检查 cron 或 timer 配置中的频率、幂等、重试、日志与并发风险。；use for cron, timer, ops workflows；do not use for 直接启停生产任务, 替代真正监控. | |
| csv-cleanroom Profile messy CSV files, standardize columns, detect data quality issues, and produce a reproducible cleanup plan. | |
| Customer Voice Synthesizer 聚合客服、销售、评价与访谈中的用户原声，并按 JTBD/阶段组织。；use for customer-voice, jtbd, research workflows；do not use for 泄露用户隐私, 选择性忽略负面声音. | |
| Data Retention Mapper 梳理数据保留周期、落盘位置、清理责任与过期处置建议。；use for data-retention, governance, privacy workflows；do not use for 替代正式合规意见, 隐瞒敏感存储位置风险. | |
| Dataset Intake Auditor 在新数据集接入前检查字段、单位、缺失率、异常值与可用性。；use for data, dataset, audit workflows；do not use for 伪造统计结果, 替代正式数据治理平台. | |
| Decision Ledger 从纪要、聊天或项目材料中提取决策、负责人、截止时间、前提假设与撤销条件。；use for decision, meeting, governance workflows；do not use for 编造不存在的决策, 替代法律审计. | |
| Deck Narrative Planner 把材料转成 PPT/Deck 叙事结构，生成每页一句标题、证据需求与过渡逻辑。；use for presentation, deck, storytelling workflows；do not use for 直接生成花哨视觉稿, 编造证据. | |
| Dependency Map Builder 梳理跨团队依赖、关键路径、脆弱节点和催办节奏，输出文本依赖图与风险链。；use for dependency, coordination, risk workflows；do not use for 替代甘特图工具, 直接修改项目系统. | |
| Dependency Upgrade Briefing 解释依赖升级的收益、风险、回滚方案与对业务的影响。；use for dependencies, upgrade, risk workflows；do not use for 伪造上游 changelog, 替代兼容性测试. | |
| Desktop Cleanup Playbook 为桌面文件生成整理方案、分类规则和阶段性清理计划，先分析再行动。；use for desktop, cleanup, organization workflows；do not use for 自动删除桌面文件, 越权访问系统目录. | |
| desktop-music-launcher 检索本机已安装音乐软件，启动它，并根据用户需求推荐、搜索或播放歌曲；在 macOS 上可用 AppleScript 控制 Spotify 和 Apple Music，并为 Spotify 增加可选的精确点播链路。 | |
| Doc Gap Finder 扫描文档目录、标题结构与文件分布，找缺失章节、重复内容和过时区域。；use for docs, audit, knowledge workflows；do not use for 读取无权限目录, 直接修改原文档. | |
| downloads-command-center Organize the Downloads folder into a clean, searchable command center by file type, project, date, and action state. |
7,401–7,450 of 108,824