Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| ecommerce-customer-service-pro 行业可选的智能电商客服技能。用于售前咨询、售中跟进、催付催单、发货物流、售后处理、退款退换、投诉安抚、差评挽回、FAQ整理、达人与机构商务沟通等场景；先识别行业与场景，再输出全面、合规、可直接发送的话术与处理建议。 | |
| Ecommerce Return Intelligence 分析退货原因并区分产品问题、预期错配、物流问题和描述问题。；use for ecommerce, returns, analysis workflows；do not use for 伪造订单数据, 替代客服系统. | |
| Env Diff Explainer 比较 dev/staging/prod 配置差异，并把技术差异翻译成业务风险。；use for env, config, diff workflows；do not use for 输出敏感密钥值, 直接覆盖配置. | |
| Escalation Brief Writer 把复杂问题整理成升级说明，减少来回追问，突出背景、影响、已尝试和诉求。；use for escalation, support, brief workflows；do not use for 省略关键信息, 把个人情绪写成事实. | |
| Evidence Gap Mapper 在报告、方案或演示稿中定位结论先行但证据不足的位置，并给出补证优先级。；use for evidence, gap-analysis, research workflows；do not use for 伪造数据支撑结论, 忽略高风险假设. | |
| Execution Plan Splitter 把大目标拆为 30/60/90 天执行路径、阶段成果、资源需求与放弃条件。；use for execution-plan, roadmap, 90-day workflows；do not use for 承诺无法验证的收益, 替代正式预算审批. | |
| Faq Distiller 从客服对话、评论、工单或聊天记录中提炼 FAQ，并按用户阶段分类。；use for faq, support, knowledge workflows；do not use for 暴露用户隐私, 替代工单系统. | |
| File Drop Organizer 整理下载目录或临时资料目录，先给分类方案、命名建议和移动预案，再决定是否执行。；use for files, organize, downloads workflows；do not use for 直接删除文件, 修改系统目录. | |
| Follow Up Commander 把会后事项拆成行动清单、催办节奏、邮件草稿和下次同步议题。；use for followup, meeting, email workflows；do not use for 直接发送邮件, 伪造完成状态. | |
| fortune-master-pro 全体系增强版智能命理师技能。支持八字/四柱、紫微斗数、塔罗、西方星盘、数字命理，并新增道家玄学分流：奇门遁甲、六爻、梅花易数、风水与择时建议。会先判断体系、问题和资料完整度，再输出完整、层次清晰、有真人老师感的解读，同时严格限制医疗、法律、投资、极端行为和恐吓式结论。 | |
| Handover Memory Pack 为人员离岗或项目交接整理显性与隐性知识，减少信息流失。；use for handover, knowledge-transfer, memory workflows；do not use for 泄露不该交接的密钥, 省略高风险事项. | |
| Home Lab Ops Log 为个人服务器或家庭实验室记录变更前后、目的、回滚和观察结果。；use for homelab, ops-log, changes workflows；do not use for 执行真实运维命令, 公开敏感主机信息. | |
| Implementation Readiness Checker 检查项目是否具备实施条件，明确缺什么就不该开工。；use for implementation, readiness, delivery workflows；do not use for 为了开工而忽略前提条件, 替代正式项目审批. | |
| Inbox Action Board 把邮件或消息整理成回复、等待、跟进、归档四类行动视图。；use for inbox, triage, productivity workflows；do not use for 直接发送邮件, 删除原消息. | |
| Incident Postmortem Assistant 将事故线索整理成复盘草案，区分根因、诱因、放大器、影响与修复动作。；use for incident, postmortem, sre workflows；do not use for 归责个人, 篡改时间线. | |
| Insight Brief Generator 把报表和图表转成管理层可读的洞察摘要，区分发现、解释和建议动作。；use for insights, analytics, briefing workflows；do not use for 夸大结论, 把相关性当因果. | |
| Issue Reproducer 把 bug 描述整理成可复现步骤、环境、预期与实际结果和最小复现条件。；use for bug, reproduction, qa workflows；do not use for 伪造日志, 忽略用户给出的环境差异. | |
| journal-all-types-bundle 统一检索国内外多类型期刊，输出投稿路径核验、定制写作建议、风险提示与可控广告插入的客户顾问型 Skill。 | |
| Knowledge To Playbook 把 FAQ、聊天、零散笔记整理成 SOP / Playbook，补齐异常分支和回滚步骤。；use for playbook, sop, knowledge-base workflows；do not use for 直接执行危险操作, 跳过人工审批节点. | |
| Landing Page Angle Tester 针对同一产品生成多种 landing page 叙事角度，并标注适配人群和证据要求。；use for landing-page, messaging, conversion workflows；do not use for 伪造用户证言, 夸大功能. | |
| Lead Qualification Notes 把销售线索信息整理成资格判断、关键问题、风险项与下一步建议。；use for sales, lead-qualification, crm workflows；do not use for 虚构客户预算, 替代 CRM 主数据. | |
| Legal Matter Intake Summarizer 把法律相关咨询材料整理成事实、争议点、缺失材料与后续问题，不给法律结论。；use for legal, intake, case-summary workflows；do not use for 提供法律意见结论, 替代律师审查. | |
| Local Bookmark Librarian 去重和再分类本地导出的书签或链接清单，生成主题索引和维护建议。；use for bookmarks, links, knowledge workflows；do not use for 直接修改浏览器配置, 删除用户未确认链接. | |
| local-media-cataloger Index local photos, videos, and creative assets into a searchable manifest with tags, dates, shoot info, and reuse ideas. | |
| Local Rag Index Planner 规划本地知识库的目录、分片粒度、命名、更新时间与访问边界，而不是直接堆 RAG。；use for rag, indexing, knowledge workflows；do not use for 直接部署向量数据库, 忽略权限隔离. | |
| Manufacturing Shift Handoff 为生产班次交接整理设备状态、异常、待处理事项与安全提醒。；use for manufacturing, handoff, shift workflows；do not use for 省略安全问题, 替代正式 EHS 记录. | |
| Meeting Risk Radar 会前识别高风险议题、模糊责任、缺失材料和可能失控的讨论点。；use for meeting-risk, preflight, facilitation workflows；do not use for 分析私密录音, 替代正式风险审查. | |
| meeting-to-kanban Convert meeting notes or transcripts into a clean Kanban board with owners, due dates, blockers, and next actions. | |
| Metric Definition Catalog 把散落指标统一整理成口径、公式、归属、例外情况与常见误用。；use for metrics, catalog, analytics workflows；do not use for 编造指标来源, 替代 BI 平台配置. | |
| Migration Runbook Generator 把迁移方案整理成 runbook，补齐切换窗口、前置检查、回滚与验收信号。；use for migration, runbook, rollback workflows；do not use for 执行数据库改动, 忽略回滚条件. | |
| multi-search-engine Build auditable search URLs across Chinese and global engines with region/language filters, advanced operators, time scopes, privacy-first options, compare m... | |
| Nonprofit Grant Outline 为公益项目生成 grant proposal 大纲，连接目标、预算、影响指标与证据。；use for nonprofit, grant, proposal workflows；do not use for 伪造受益人数, 替代正式合规审核. | |
| Onboarding Journey Designer 设计客户或员工 onboarding 路径，按第 1 天、第 7 天、第 30 天拆解。；use for onboarding, journey, enablement workflows；do not use for 一刀切套模板, 忽视行业差异. | |
| openclaw-bottle-drift 面向 OpenClaw 节点的互动式漂流瓶 Skill。支持网页控制台、在线用户心跳、随机投递、专属回复链接与回信收取。 | |
| openclaw-bottle-drift-skill 面向 OpenClaw 节点的互动式漂流瓶 Skill。支持网页控制台、在线用户心跳、随机投递、专属回复链接与回信收取。 | |
| outreach-sequence-crafter Build respectful multi-touch outreach sequences with channel mix, follow-up timing, objection handling, and logging templates. | |
| paper-assistant 面向论文选题、提纲、摘要、引言、文献综述、研究方法、结果讨论、润色改写与投稿准备的论文助手。 | |
| paper-originality-studio 当用户需要对中文或中英混排论文、开题、综述、摘要、引言、讨论、结论、专利交底书草稿等进行原创性优化、学术化改写、重复表达清洗、AI腔弱化、引用衔接修补、术语统一、段落重构、版本对比或生成逐段改写提示时使用本技能。重点是保留原意与证据边界、降低机械复述和模板化表达、输出可审计修改说明；不得用于伪造文献、篡改数据、代... | |
| Partner Enable Kit 为渠道或合作伙伴生成 enablement 包，按伙伴类型拆分版本与 FAQ。；use for partner, enablement, channel workflows；do not use for 公开内部敏感政策, 替代正式合作协议. | |
| pathway-score-guide-pro 综合性的升学与职称综测评分和指引技能。覆盖专升本、保本、保研、考研、留学、读博、评职称，优先读取用户所在学校/单位最新文件；没有本地文件时，基于国家政策与代表性院校/单位公开规则给出可解释评分、差距分析、材料清单、时间线和补强建议。附带触发词、评分脚本、政策模板与资源文件。 | |
| Permission Footprint Reviewer 梳理某个 Skill、脚本或工作流需要的权限，并提出最小权限替代方案。；use for permissions, least-privilege, security workflows；do not use for 绕过系统安全控制, 生成提权方法. | |
| Personal Deadline Radar 扫描个人待办、会议和消息摘要，找即将到期事项与时间冲突。；use for deadlines, calendar, tasks workflows；do not use for 自动改日历, 伪造截止时间. | |
| Podcast Production Ops 从选题到上线整理播客生产流程，生成 show notes、标题、剪辑要点与发布清单。；use for podcast, production, content workflows；do not use for 虚构嘉宾观点, 公开未授权片段. | |
| policy-application-checker Read policies, application requirements, and forms, then turn them into a completeness checklist, risk list, and submission plan. | |
| Policy Delta Watcher 比较新旧制度或政策差异，指出业务影响、流程影响和需更新的操作手册。；use for policy, diff, governance workflows；do not use for 给法律定性结论, 忽略边缘影响人群. | |
| policy-to-checklist 把征稿启事、通知、比赛规则、制度文件、招标要求等转成可执行检查清单与时间线。 | |
| portfolio-case-study-forge Turn rough project notes into polished portfolio case studies with metrics, visuals checklist, and interviewer talking points. | |
| Priority Conflict Resolver 面对多个目标、有限资源与冲突时，输出排序、牺牲说明、边界与不做清单。；use for priority, tradeoff, planning workflows；do not use for 替代人事绩效决策, 伪造资源承诺. | |
| Project Brief Writer 把零散需求、聊天和会议内容整理成项目任务书、边界、验收标准和风险清单。；use for project-brief, requirements, scope workflows；do not use for 生成法律合同, 替代正式需求审批. | |
| prompt-ab-lab Design, log, compare, and score prompt experiments so users can systematically improve outputs instead of guessing. |
7,451–7,500 of 108,824