Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| 短视频脚本创作 Short video script generator. 短视频脚本生成器、视频脚本、抖音文案、抖音脚本、快手脚本、口播稿、视频拍摄脚本、YouTube脚本、YouTube Shorts脚本、B站脚本、bilibili脚本、分镜脚本、视频大纲、视频文案、短视频创作、Reels脚本、TikTok脚本、vlog脚本... | |
| Movie Manager Organizes movie recommendations in Obsidian and generates suggestions based on user profile. | |
| NXT Pulse Agent An adaptive proactive agent skill that manages user energy levels and task prioritization using semantic pulse checks. | |
| Meta Business CLI Skill for the Meta Business CLI. Complete WhatsApp, Instagram, Facebook Pages, and Messenger automation via the Graph API. Supports messaging, media, templat... | |
| Obsidian CLI Skill for the official Obsidian CLI (v1.12+). Complete vault automation including files, daily notes, search, tasks, tags, properties, links, bookmarks, base... | |
| bilibili-video-transcriber 【B站字幕获取】专业处理 B 站视频字幕问题,支持语音转文字、字幕下载、内容分析。基于实际 B 站字幕系统错误问题开发,提供完整的解决方案。 | |
| Diary System Configure an AI diary system for OpenClaw. Use when the user wants to enable, set up, or share an AI diary feature. Triggers on phrases like: 日记系统, diary sys... | |
| Calendar Reminders (gcalcli + CalDAV) Provides a config-driven wrapper around gcalcli plus optional CalDAV integration to generate JSON reminder plans for scheduling one-shot OpenClaw reminders. | |
| Raindrop CLI Manage Raindrop.io bookmarks from the command line (search, exists, add, update, remove) using the Raindrop REST API. Use when automating bookmark capture and organization with a personal RAINDROP_TOKEN. | |
| Audit Evolution Automates agent self-audit by gathering evidence, summarizing runs, proposing minimal patches, and requesting human approval for safe incremental evolution. | |
| Brand Butler: Local Authority Engine Brand Butler: Local Authority Engine — the white-glove SEO and AEO system for local service businesses. Use this skill immediately when the user asks about S... | |
| Brand Butler Webinar Warrior Autonomous webinar strategy and content builder for coaches, course creators, community builders, and service providers. Use this skill immediately when the... | |
| Travel Search Find the best travel deals by searching and comparing flights, hotels, Airbnb stays, car rentals, and ferries across multiple providers simultaneously. Smart... | |
| Openclaw Vial self-healing runtime — 8 protocols covering technical failures, behavioral failures, and agent role enforcement. | |
| Google Calendar Interact with Google Calendar via the Google Calendar API – list upcoming events, create new events, update or delete them. Use this skill when you need programmatic access to your calendar from OpenClaw. | |
| Ressemble TTS e STT Text-to-Speech and Speech-to-Text integration using Resemble AI HTTP API. | |
| Prompt Injection Defense Harden agent sessions against prompt injection from untrusted content. Use when the agent reads web search results, emails, downloaded files, PDFs, or any ex... | |
| Cavos Cli Interact with the Cavos CLI for Starknet wallet operations. Use for transfers, approvals, contract calls, session management, and transaction monitoring. | |
| Discord Voice Using Deepgram Voice-channel conversations in Discord using Deepgram streaming STT + low-latency TTS | |
| chitin-chronicle Coordinates multi-agent content publishing by preventing duplicates, tracking timeline, managing claims, and recording immutable publication history with git... | |
| chitin-core Selects the most cost-effective capable model for tasks, handles rate limit failures gracefully, and supports tier overrides and health checks. | |
| chitin-moat Enforce contextual permission boundaries for AI agents based on communication surface. Constrains agent capabilities (exec, file I/O, secrets, messaging) by... | |
| Adscrawl Browser Read, capture, or interact with browser-rendered websites through AdsCrawl. Use when an AI agent needs to extract a page as Markdown, structured article JSON, or HTML; capture a viewport or full-page PNG screenshot; or create a remote CDP b | |
| Openclaw Devboxes Skill Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user as... | |
| chanlun-engine-skill 用缠论客观分析A股股票。当用户提到 缠论、分型、笔、线段、中枢、背驰、买卖点、K线结构,或想知道某只股票该买该卖该持有还是等待时使用。确定性脚本计算缠论结构并给出四态操作判定(买入候选/持有/卖出减仓/等待观察)与失效价位,AI 只负责解读转述,不心算结构。免费数据源开箱即用,无需注册。 | |
| DeAI DeAI — Improve AI-drafted text to sound naturally human. Three-layer editing: remove overused filler phrases, restructure for natural rhythm, mark positions for authentic personal voice. Adds review markers ([💬] [📝] [📊]) for user to fill in | |
| everything-is-ok 无所不能 — Universal prompt compression protocol. Translate natural language into compressed I-Lang syntax. Text-to-text translator only — does not access files, URLs, or external resources. I-Lang has been tested across ChatGPT, Claude, Gemini | |
| freemoney 白拿钱 — 美国、加拿大、英国、澳洲集体诉讼理赔追踪技能。监控多国开放案件,筛选免凭证案件。数据源覆盖OpenClassActions、TopClassActions、ClaimDepot及各国官方公告。纯中文交互,I-Lang v4.0协议驱动。被动查询工具,不主动推送(推送功能见freemoney-plugi... | |
| ilang-compress Compress natural language prompts into I-Lang — AI-native structured instructions. Output is text notation only — review before passing to execution agents. | |
| lazarus Lazarus v2 — Bring dead websites back to life. Keyword-in: hunt candidate dead domains with evidence. Domain-in: recover only pages with heuristic indexing evidence, pass a hard review gate, ship a machine-readable Recovery Bundle. 捡尸复活死站:热 | |
| less-token Compress verbose summary prompts into structured one-line instructions. Text-to-text translator only — no CLI, no API key, no install, no external dependencies. I-Lang has been tested across ChatGPT, Claude, Gemini, DeepSeek, Kimi, Qwen and | |
| Niche-Awesome Niche-Awesome — Solve the #1 problem for beginners building AI products: not knowing what to build. A complete 6-step BRD (Business Requirements Document) research process for niche product selection and market validation. You do the search | |
| no-prompt Stop learning prompt engineering. Tell AI what you want in plain language — AI writes a structured instruction for you in I-Lang. Copy it to other AIs as a well-structured starting point. Zero prompt skills needed. Generates text instructio | |
| SEO-Awesome 利用Google官方API实现全链路出海SEO自动化,批量生成PSEO页面,自动发布和GA4数据驱动复盘。 | |
| WeChat-Awesome 微信公众号写作助手。200+篇实战验证的爆文结构引擎。你投喂素材,它输出MD文件+封面图提示词+自查报告。内置17条写作基因、品牌简称、平台合规、10项自查清单。不接受无素材请求,不是内容生成器。 | |
| adspower-browser AdsPower profile operation via adspower-browser CLI. open/launch/start browser or profile, environment, config profile, AdsPower; create/update/delete/list p... | |
| AdsTurbo AI 创作全家桶 · AdsTurbo AI Creative Suite AdsTurbo 全能力入口:AI 数字人口播、视频生成与延长、广告复刻、去水印、4K 超分、视频翻译、换角色、动作控制、字幕、AI 图片生成与电商图。适合需要跨能力串联的完整创作流程。 | |
| AdsTurbo 广告视频复刻 · AdsTurbo Ad Video Clone 看中一条广告就照着做一条:自动拉片得出分镜与提示词,再生成同款结构的新视频。也可只做视频分析不生成。 | |
| AdsTurbo 虚拟人口播 · AdsTurbo Digital Human Voiceover 让虚拟人把文案念出来:可选平台数字人形象、用照片+声音克隆专属形象,或直接给一张人像加一段音频做对口型。含 TTS 配音与形象管理。 | |
| AdsTurbo AI 图片创作 · AdsTurbo AI Image Creation 文生图与图片编辑,外加电商场景全套:抠图、商品主图/场景图/细节图、活动海报、去水印消除、高清放大。 | |
| AdsTurbo 视频精修 · AdsTurbo Video Cleanup 画面内容不变,只让成片更干净:去水印、去 logo、去硬字幕、提升分辨率到 2K/4K、添加或翻译字幕。 | |
| AdsTurbo AI 视频生成 · AdsTurbo AI Video Generation 从零造画面:文生视频、图生视频、首尾帧补全、多参考素材生成,以及对已有视频做延长和局部编辑。 | |
| AdsTurbo 视频改造 · AdsTurbo Video Transform 换掉视频里的某个元素:把出镜人物换成另一个人、用参考视频的动作驱动静态人像、把整条视频翻译成另一种语言。 | |
| Docx Tool 使用 python-docx 库创建、读取和修改 Word 文档 (.docx)。支持文本、段落、表格、样式、图片等操作。 | |
| Hxd Deploy 部署霍小钉服务到服务器。自动上传 JAR 文件、备份旧版本、重启服务。 | |
| Query Customer Service Record 查询霍小钉客户服务记录。使用场景:用户需要查询某个客户的服务小计记录时,自动解析客户名称、调用搜索接口确认客户、处理多客户选择、查询服务记录并展示总结。 | |
| Amazon Review Workbook Collect all customer reviews from an Amazon product URL or product-reviews URL through a logged-in Chrome session on port 9222, export a 14-column factual wo... | |
| Mobayilo Voice (Beta) Place outbound phone calls via Mobayilo with safe defaults (preview mode by default) and explicit live execution. | |
| SecureClaw Security skill for OpenClaw agents (7-framework aligned). 15 core rules + automated scripts covering OWASP ASI Top 10, MITRE ATLAS, CoSAI, CSA MAESTRO, and N... | |
| Codex Reset Radar Monitor Codex usage reset windows via codex-reset-radar.pages.dev. Polls current.json, detects window open/close, prediction level changes, and probability j... |
8,901–8,950 of 108,824