Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| Prompt Leak Auditor 审查 prompt、Skill 文案和说明中是否泄漏密钥、路径、内部规则或高风险指令。；use for prompt, security, audit workflows；do not use for 把扫描到的密钥原文再次扩散, 输出可利用攻击步骤. | |
| Proposal Comparator 对比多个方案文档，输出差异、隐含成本、风险与推荐结论。；use for proposal, comparison, decision workflows；do not use for 忽略用户给的约束, 伪造数据支持结论. | |
| Qa Scenario Synthesizer 把需求拆成功能、异常、跨端、脏输入和恢复场景测试集。；use for qa, test-scenarios, edge-cases workflows；do not use for 宣称已经完成测试, 忽略关键用户路径. | |
| quote-invoice-workbench Turn messy service pricing notes into professional quotes, SOW line items, and invoice drafts with assumptions clearly surfaced. | |
| Real Estate Showing Brief 为房产带看前整理买家画像、关注点、路线与现场提问清单。；use for real-estate, showing, brief workflows；do not use for 编造房源信息, 替代正式法律披露. | |
| Receipt Expense Sorter 整理收据和报销资料，按周期、类别、凭证完整度做分组与缺失提醒。；use for receipts, expenses, finance-ops workflows；do not use for 替代正式财务报销系统, 生成虚假发票信息. | |
| receipt-expense-workbench Normalize receipts, reimbursement slips, and invoices into a clean expense ledger with category mapping and anomaly flags. | |
| Recruiting Interview Kit 根据 JD 生成面试题、评分维度、红旗项与面试记录模板。；use for recruiting, interview, hiring workflows；do not use for 生成歧视性问题, 替代最终录用决策. | |
| Regression Story Builder 基于历史问题生成回归测试故事集、风险等级和优先级。；use for regression, testing, qa workflows；do not use for 宣称已经执行测试, 跳过高风险路径. | |
| Release Note Localizer 将发布说明转换为中文、英文、客户版和技术版，同时保持术语一致。；use for localization, release-notes, translation workflows；do not use for 机翻敏感合同条款, 替代专业法律翻译. | |
| Renewal Risk Monitor 识别续约风险信号，区分可挽回风险与高概率流失信号。；use for renewal, risk, customer-success workflows；do not use for 伪造健康度数据, 替代正式续约决策. | |
| reply-coach 从剪贴板读取聊天内容，生成尊重边界、自然不油腻的高情商回复建议，适用于微信、QQ等聊天场景。 | |
| Repo Onboarding Guide 扫描仓库目录与说明文件，生成新成员上手路径、推荐阅读顺序与踩坑提醒。；use for repo, onboarding, developer-experience workflows；do not use for 泄漏私有源码内容到外部, 执行构建命令. | |
| Research Claim Checker 检查一篇研究或分析里的结论是否被证据支撑，指出证据链断点。；use for research, claims, evidence workflows；do not use for 伪造出处, 替代同行评议. | |
| research-matrix-builder Build literature matrices from papers, notes, and abstracts to compare methods, data, findings, and research gaps. | |
| resume-job-match-lab Tailor resumes and project bullets to a target role, quantify gaps, and prepare an interview-ready evidence map. | |
| Review Miner 从评论、评价和反馈中提炼卖点、痛点、反对意见与应删除的话术。；use for reviews, voice-of-customer, marketing workflows；do not use for 造假好评, 泄露用户身份. | |
| reviewer-rebuttal-coach 从剪贴板读取审稿意见、导师批注或评审反馈，生成逐条回复、修改计划与优先级建议。 | |
| rubric-gap-analyzer 读取评分标准、作业要求或评估rubric，分析当前草稿的差距并给出提分计划。 | |
| Run Command Safety Check 在执行 shell 方案前检查危险模式，如 pipe-to-shell、覆盖式删除、危险重定向或混淆执行。；use for shell, security, command-review workflows；do not use for 提供攻击性命令, 帮用户绕过限制. | |
| Sbom Explainer 把依赖清单或 SBOM 翻译成非技术可读的风险说明，按影响面排序。；use for sbom, dependencies, risk workflows；do not use for 伪造 CVE 状态, 替代专业漏洞扫描. | |
| Screenshot To Task 把截图里的待办或灵感整理成任务、备注和优先级。；use for screenshots, tasks, capture workflows；do not use for 伪造截图内容, 替代 OCR 系统. | |
| screenshot-ux-auditor Turn app screenshots into structured UX, copywriting, and conversion audits with issue severity and recommended fixes. | |
| Secret Exposure Gate 在发布前检查目录中是否含秘钥、token、私有 URL、证书片段或凭证文件。；use for secrets, security, preflight workflows；do not use for 显示完整密钥值, 修改用户文件. | |
| Skill Example Synthesizer 为 Skill 生成高质量正例、反例和边界例，提升路由与可理解性。；use for skills, examples, routing workflows；do not use for 只给笼统例子, 忽视误触发场景. | |
| Skill Frontmatter Doctor 修复 frontmatter、metadata、requires、install 和目录结构问题，贴合当前 OpenClaw 规范。；use for skills, frontmatter, validation workflows；do not use for 编造不存在的字段, 忽略单行 JSON 约束. | |
| Skill Gap Finder 扫描现有 Skill 套装，找重复、缺口、职责冲突和最该补的空位。；use for skills, bundle, analysis workflows；do not use for 臆造目录内容, 直接删除 skill. | |
| Skill Install Checker 安装前验证二进制、环境变量、配置、OS 与 sandbox 条件，解释为什么此机不适合装。；use for skills, install, preflight workflows；do not use for 假装依赖已经满足, 直接修改系统环境. | |
| Skill Market Fit Ranker 对一批 Skill 选题按高频、低门槛、传播性、ROI 和风险做排序。；use for skills, market-fit, prioritization workflows；do not use for 只按个人偏好排序, 忽略发布风险. | |
| Skill Pack Composer 把多个 Skill 组合成套装，检查 slug、依赖、资源和定位冲突。；use for skills, bundle, packaging workflows；do not use for 混入重复职责的 skill, 忽略依赖冲突. | |
| Skill Readme Rebuilder 从 SKILL.md、脚本与资源反推 README、FAQ 与示例，保持说明一致。；use for skills, readme, docs workflows；do not use for 伪造脚本能力, 跳过真实依赖声明. | |
| Skill Risk Splitter 把职责过杂的 Skill 拆成安全版、增强版或多子 Skill，降低扫描和维护风险。；use for skills, refactor, risk workflows；do not use for 为了拆分而失去清晰定位, 隐藏高风险行为. | |
| Skill Routing Benchmark 测试多个 Skill 描述是否会路由冲突，并生成正例、反例与负向触发语句。；use for skills, routing, benchmark workflows；do not use for 只给模糊建议, 忽略高度相近的 skill. | |
| Skill Smoke Test Author 自动为 Skill 生成 smoke test 模板，覆盖依赖缺失、空输入和标准路径。；use for skills, testing, smoke-test workflows；do not use for 写无法执行的测试, 忽略失败路径. | |
| Social Post Batcher 把一个主题拆成 7/14/30 条系列帖子，控制重复度和叙事连续性。；use for social-media, batching, content workflows；do not use for 刷屏式重复, 编造事实. | |
| sop-factory Turn rough workflows into standard operating procedures with roles, inputs, outputs, checkpoints, and exception handling. | |
| Sop Refiner 优化已有 SOP，删冗余、补异常路径、补回滚、补质量门槛。；use for sop, process, improvement workflows；do not use for 改变制度权限边界, 跳过安全检查. | |
| Source Trace Builder 为分析稿建立引用索引和原始出处映射，区分一手与二手来源。；use for sources, citations, research workflows；do not use for 编造文献出处, 替代正式文献管理软件. | |
| Spec To Checklist 把 PRD、接口文档或需求规格拆成验收、联调、测试和上线清单。；use for spec, checklist, acceptance workflows；do not use for 替代真实测试执行, 伪造通过结果. | |
| Stakeholder Update Drafter 同一组事实分别输出老板版、客户版、执行版和风险透明版项目更新。；use for stakeholder, status-update, communication workflows；do not use for 夸大成果, 隐瞒关键风险. | |
| study-revision-planner Convert a syllabus, exam scope, or course notes into a revision calendar with spaced review, mock tests, and weak-point loops. | |
| Success Plan Generator 为 B2B 客户生成成功计划，绑定里程碑、可验证结果与复盘节奏。；use for success-plan, customer-success, b2b workflows；do not use for 承诺合同外服务, 替代正式项目计划. | |
| Support Macro Crafter 批量生成客服回复模板，统一同理句、行动句、边界句与升级提示。；use for support, macros, customer-service workflows；do not use for 承诺做不到的事情, 输出攻击性文案. | |
| Survey Response Coder 将开放式问卷回答编码成主题、情绪与标签，并生成可复核手册。；use for survey, coding, qualitative workflows；do not use for 把少量样本当总体结论, 暴露受访者隐私. | |
| Taxonomy Normalizer 统一不同团队、不同表里的分类体系，保留别名映射与废弃词。；use for taxonomy, normalization, data-governance workflows；do not use for 强行抹平业务差异, 直接改生产数据. | |
| Template Snippet Switchboard 管理常用模板和片段，按场景、角色、语气、长度切换并维护版本。；use for templates, snippets, writing workflows；do not use for 塞入未经审校的敏感话术, 替代版本管理系统. | |
| text-game-arcade-universe-v3 综合性 ASCII 文字游戏大厅。严格按规则渲染和裁判五子棋、围棋、井字棋、黑白棋、四子棋、海战棋、中国象棋、国际象棋、扫雷、数独、2048、推箱子、文字迷宫，以及接龙、猜词、猜数、Lights Out、Nim、汉诺塔等小游戏；带强触发词、统一大厅、标准棋盘模板、合法性校验、难度、悔棋与裁判模式。 | |
| Vendor Risk Brief 对外部 SaaS/API 形成风险摘要，聚焦集成影响、权限、数据流向和替代方案。；use for vendor-risk, saas, security workflows；do not use for 冒充安全认证结论, 替代正式法务/安全审批. | |
| wallpaper-auto-switch-pro-executable 在 macOS 本机从本地壁纸文件夹中立即换壁纸，或安装 launchd 定时轮换任务的可执行技能。 | |
| Webinar Repurpose Studio 把 webinar 内容拆成回放介绍、短文案、社媒提纲、FAQ 和后续邮件。；use for webinar, repurpose, content workflows；do not use for 生成虚假嘉宾信息, 泄露未公开内容. |
7,501–7,550 of 108,824