Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| Google Tasks Fetch, display, create, and delete Google Tasks using the Google Tasks API. Use when the user asks to check, view, list, get, add, create, remove, or delete their Google Tasks, to-do lists, or task items. Handles OAuth authentication automa | |
| Ralph Loop (Agent Mode) Guide OpenClaw agents to execute Ralph Wiggum loops using exec and process tools. Agent orchestrates coding agents (Codex, Claude Code, OpenCode, Goose) with proper TTY support via pty:true. Plans/builds code via PROMPT.md + AGENTS.md, SPEC | |
| Conservative Code Edits 修改现有项目代码时强制执行保守策略,最小化改动、保留既有架构与风格、规避无关重构及共享代码风险。 | |
| Function Extraction 从项目代码中提取特定功能的完整实现链路,生成含业务逻辑、数据流、异常处理等要素的技术开发文档,附 Mermaid 流程图/时序图。 | |
| Function Testing 根据需求文档(PRD)、Git 提交记录或用户故事生成功能测试用例,输出 Excel 报告。 | |
| Free Time Series Forecasting with Plonky.ai Use Plonky.ai to upload, analyze, and forecast recurring time-series data for planning and budgeting, with guidance on data quality and model suitability. | |
| ThinkForce Dispatch tasks to your ThinkForce AI agents via REST API and poll for results easily without server setup or complex configuration. | |
| fame graphic Generate diverse creative illustrations via OpenAI Images API. Create book illustrations, editorial art, children's book art, concept illustrations, and artistic scenes. Use when user needs creative visual content for stories, articles, pre | |
| psych-questionnaire-cleaner Clean, score, and audit psychology questionnaire or survey datasets with reproducible rules, participant-level quality flags, privacy protection, Chinese-language outputs, and traceable reports. Use for 心理学问卷、量表、调查数据的缺失值、异常编码、重复记录、作答质量、反向计分 | |
| 心理学研究设计助手 将心理学研究想法转化为可检验且可实施的完整研究设计 | |
| GigaMail Email and calendar for your OpenClaw agent through the GigaMail MCP server — read, search, draft, reply, schedule — with every destructive action (send, delete, calendar write) held for out-of-band human approval that the agent cannot grant | |
| Slack Controller Control Slack via Browser Automation to send messages, manage huddles, screen share, set status, and react as the logged-in user. | |
| Upwork Automation Using Ai Automate Upwork login, search, filter, and proposal drafting in one browser session, stopping before submission unless explicitly instructed. | |
| Para Wallet Create and manage MPC blockchain wallets and sign transactions on EVM and Solana chains using Para's secure distributed key infrastructure via REST API. | |
| 前端开发规范 企业级前端开发规范 Skill,包含命名、目录、CSS/JS/TS、Vue/React、Git、构建、性能、安全完整规范 | |
| continue-learning Instinct-based learning system for OpenClaw. Analyzes sessions, detects patterns, creates atomic learnings with confidence scoring, and suggests optimizations for self-evolution. Works alongside agent-self-improvement for complete learning: | |
| council-of-wisdom-omni A multi-agent deliberation hub with 3 core agents and extensible extended agents. Activates on explicit request, can suggest calling user workspace skills with consent. | |
| daily-tips-omni Daily AI agent optimization tips, tricks and self-improvement strategies. Learn cost-saving, speed, memory and automation best practices from the AI agent community. Use when: you want daily tips to optimize your AI agent, reduce costs, imp | |
| fasaha Review and fix AI-generated or AI-translated Arabic so it reads as fluent, native Modern Standard Arabic (MSA) instead of translated/calqued output. Trigger on translating INTO Arabic, writing in Arabic (اكتب بالعربية / اكتبلي بالعربية), wr | |
| private-web-search-searchxng Self-hosted private web search using SearXNG. Use when privacy is important, external search APIs are blocked or paid, or you need search without tracking. | |
| purple-cow-content Write and review distinctive, opinionated content that stands out instead of blending in — blog posts, articles, social media captions, LinkedIn posts, threads, newsletters, ad copy, landing pages and scripts — using the Purple Cow lens (Se | |
| skill-validator-omni Validates skills against seven authoring standards across all agents. Use to audit/certify. | |
| Codebase Survey Survey an existing codebase to understand its structure, scope, architecture, and current state. Trigger on 'deep dive', 'explore this codebase', 'survey the... | |
| Initialize Project Structure Use when starting a new project from scratch and the user wants the full plan/build/recap/document workflow scaffolded. Creates slim CLAUDE.md, gitignored CL... | |
| Project Knowledge Graph Cross-project knowledge graph powered by local FalkorDB. Indexes all project artifacts (recaps, plans, project memory files, architecture docs, skills) acros... | |
| Project Methodology Complete project lifecycle methodology for Hermes Agent sessions. A single, integrated workflow covering warmup → plan → build → recap → wrapup — with contex... | |
| Slim Project Memory Use when a project's project memory file is over ~300 lines, when starting a new project from scratch, or when the user mentions context bloat, lost env URLs... | |
| Tech Stack Evaluation Evaluate whether a project's current tech stack is appropriate for its goals, and recommend alternatives when maintainability, performance, or feature expans... | |
| Grok Imagine Generate images and videos using xAI Grok Imagine Extended. Text-to-image, image editing, text-to-video, image-to-video. Use when: user asks to generate, cre... | |
| MenuVision Build beautiful HTML photo menus from restaurant URLs, PDFs, or photos using Gemini Vision and AI image generation | |
| SkillMetricScraper OpenClaw Skills Weekly — tracks trending ClawHub skills, generates GitHubAwesome-style YouTube video scripts with two-track ranking (Movers + Rockets). | |
| OpenClaw Skills Weekly OpenClaw Skills Weekly — tracks trending ClawHub skills, generates GitHubAwesome-style YouTube video scripts with two-track ranking (Movers + Rockets). | |
| soul-generator 生成专属 AI 人格配置 SOUL.md,支持三种模式: (1) 蒸馏名人:输入人名 → 自动搜索 → 生成 SOUL.md (2) SBTI/MBTI:输入类型 → 匹配预设 → 生成 SOUL.md (3) 自定义:输入描述 → 生成 SOUL.md 触发词:「蒸馏」「生成」「我是」「做一个XX的视角」「SO... | |
| slbrow-skill Browser automation via SLBrow MCP and HTTP API. Use when the user needs to navigate pages, analyze content, manage tabs, search history, extract text, or con... | |
| AI Instagram Engagement Strategy Assistant Provides tailored Instagram content ideas, captions, posting schedules, and engagement tactics to boost meaningful audience interaction and content performance. | |
| Family Grocery List Shared family grocery list — multiple members add, remove, and view items organized by store. Admin-managed access, web-verified store addresses and item ava... | |
| OpenClaw 升级前影响评估工具 深度分析 OpenClaw 版本更新对现有配置的影响,生成兼容性报告并精准备份受影响文件。Invoke when user asks to analyze OpenClaw updates, check upgrade compatibility, or backup configs before upgrading. | |
| 微信文章抓取器 - 安全版 使用 Puppeteer + Chrome 无头模式抓取微信公众号文章,支持移动端伪装,提取全文及元信息并自动保存文本。 | |
| Halocard Virtual Credit cards Create disposable virtual credit cards for online purchases. Use as a payment method when completing any online checkout during a task — e.g. ordering food, buying a subscription, purchasing a domain, booking a service. This skill is a paym | |
| DryptoBillions Billions/Iden3 authentication and identity management tools for agents. Link, proof, sign, and verify. | |
| modern-react-guidance Authoritative guidance for modern React 19+ (Actions, use, Compiler, View Transitions, Fragment refs, Activity, browser, useEffectEvent). Use when writing, reviewing, refactoring, or migrating React components, forms, data fetching, concurr | |
| MacPilot : Control macOS using CLI Control macOS via CLI using MacPilot for automating UI actions, managing windows, handling file dialogs, capturing screenshots, and system tasks. | |
| Modelslab : Generate Video, Images, LLMs using CLI and APIs Access ModelsLab's full AI platform via CLI and APIs to generate images, videos, audio, 3D models, deepfakes, manage accounts, billing, and discover AI models. | |
| Jina AI - Web Reader, Search and Deep Search Web reading and searching via Jina AI APIs. Fetch clean markdown from URLs (r.jina.ai), web search (s.jina.ai), or deep multi-step research (DeepSearch). | |
| OSRM Maps Skill Distance, routing, and geocoding using free APIs (OSRM + Nominatim/OSM). Use when the user asks about distance between places, travel time, directions, how f... | |
| jobstead Helps a job-seeker decide whether a role is actually worth their time, then tells their story for it — beautifully. Grounded in persistent, personalized knowledge of the person (profile, application tracker, lessons learned across the searc | |
| Storacha Upload Upload files to IPFS, store on Storacha, upload to decentralized storage, check Storacha status, view storage usage, create Storacha space, switch space, lis... | |
| SocialFaktory: Social Media Scheduler and Video Generator Write, generate, schedule and publish a brand's social content, in its own voice, on TikTok, Instagram, YouTube, X, LinkedIn, Facebook and Pinterest, through... | |
| 2Captcha Solve CAPTCHAs with 2Captcha from the command line during browser automation. | |
| Agentroam Travel Connectivity Buy travel eSIM data plans, gift cards, and mobile airtime with crypto (USDC, USDT, BTC, ETH, SOL and 17+ more) through AgentRoam. Use when a user wants an e... |
8,801–8,850 of 108,824