Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| Long-Term Memory (Honcho) Install the @honcho-ai/openclaw-honcho plugin and run initial setup. Runs `openclaw plugins install`, `openclaw honcho setup` (which prompts for your API key... | |
| Jules CLI Interact with the Jules CLI to manage asynchronous coding sessions. Use this skill sparingly for complex, isolated tasks that benefit from a remote VM. | |
| Boj Mcp Access Bank of Japan (BOJ/日本銀行) statistical data — price indices (CGPI, SPPI), flow of funds, balance of payments, BIS statistics, interest rates, money supp... | |
| Edinet Mcp Analyze and compare Japanese public company financial statements (BS, PL, CF) from EDINET using company name or stock code with J-GAAP, IFRS, and US-GAAP data. | |
| Estat Mcp Search and retrieve Japanese government statistics (人口, GDP, CPI, 貿易, 雇用) from e-Stat API — Japan's official open data portal with 3,000+ statistical tables.... | |
| Japan News Mcp Get Japanese financial and business news from Yahoo News Japan, NHK, Reuters Japan, and Toyo Keizai (東洋経済) — search headlines by keyword, get article summari... | |
| Japanfinance Agent Compound MCP agent combining 6 Japan finance data sources — EDINET securities filings (有価証券報告書), TDNET timely disclosures (適時開示), e-Stat government statistic... | |
| Jquants Mcp Access JPX stock market data via J-Quants API — search stocks, get daily OHLCV prices, financial summaries (revenue, profit, EPS, ROE), and earnings calendar... | |
| Tdnet Disclosure Mcp Access TDNET timely disclosures (適時開示) from Tokyo Stock Exchange (JPX/TSE) — earnings reports (決算短信), dividends, buybacks, forecast revisions, governance cha... | |
| aida Conversational interface for AIDA to get building status, control devices, optimize objectives, and run diagnostics via secure REST APIs. | |
| Personal Finance Tracker Manage personal finances, track spending by category, set budgets, and receive reminders for EMIs and one-time annual expenses. Use for logging expenses, checking budget status, or setting up financial reminders. | |
| 赤石skill 提供模仿赤石TV风格的中文写作，表面严肃实则荒诞，带有网络低质感和带干涩幽默的社会观察文本。 | |
| SlideClaw Use this for SlideClaw/Marp deck tasks (e.g. "SlideClawでスライド作って", "MarpをPDF化して", "テンプレ保存して"). | |
| network hot topics 获取当前网络热点并汇总为 10 条摘要。从微博、知乎、百度等平台或通过搜索获取实时热搜/热榜， 筛选、去重后输出 10 条热点，每条包含标题与一句话摘要。 Use when: 用户需要今日热点、热搜汇总、热榜简报、网络热点 10 条、多平台热点摘要。 NOT for: 单平台单一话题深挖、历史热点分析、需要原文链... | |
| TurboQuant Optimizer Optimizes OpenClaw token usage via multi-level compression, semantic deduplication, and adaptive token budgeting to reduce API costs and memory footprint. | |
| Haven Rental Compare Compare rental listings against a monthly budget, separate refundable deposits, and flag unknown fees and source gaps. Use for rental cost comparisons; it does not discover listings or contact landlords. | |
| mac-wallpaper-changer 自动更换 Mac 壁纸、壁纸智能推荐与偏好学习。凡涉及壁纸相关操作，都应优先使用此技能：换壁纸、更换桌面背景、 Mac wallpaper、自动换壁纸（cron/定时任务）、按关键词搜索壁纸（如"上海夜景"、"mountain sunset"）、 壁纸评分与喜好统计、壁纸推荐、位置配置。支持 Bing 每日精选... | |
| AAR Loop AAR with folder-based lessons, auto-trigger for all tasks, US Army 4-question method for AI agents. | |
| Brandkit Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained... | |
| Gpt Tasteskill Elite UX/UI & Advanced GSAP Motion Engineer. Enforces Python-driven true randomization for layout variance, strict AIDA page structure, wide editorial typogr... | |
| Image To Code Skill Elite website image-to-code skill for Codex. For visually important web tasks, it must first generate the design image(s) itself, deeply analyze them, then i... | |
| Imagegen Frontend Mobile Elite mobile app image-generation skill for creating premium, app-native screen concepts and flows. Designed for iOS, Android, and cross-platform mobile prod... | |
| Imagegen Frontend Web Elite frontend image-direction skill for generating premium, conversion-aware website design references. CRITICAL OUTPUT RULE — generate ONE separate horizon... | |
| Brutalist Skill Raw mechanical interfaces fusing Swiss typographic print with military terminal aesthetics. Rigid grids, extreme type scale contrast, utilitarian color, anal... | |
| Minimalist Skill Clean editorial-style interfaces. Warm monochrome palette, typographic contrast, flat bento grids, muted pastels. No gradients, no heavy shadows. | |
| Output Skill Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any... | |
| Redesign Skill Upgrades existing websites and apps to premium quality. Audits current design, identifies generic AI patterns, and applies high-end design standards without... | |
| Soft Skill Teaches the AI to design like a high-end agency. Defines the exact fonts, spacing, shadows, card structures, and animations that make a website feel expensiv... | |
| Stitch Skill Semantic Design System Skill for Google Stitch. Generates agent-friendly DESIGN.md files that enforce premium, anti-generic UI standards — strict typography,... | |
| Taste Skill V1 The original v1 taste-skill, preserved for projects depending on its exact behavior. The current default is `design-taste-frontend` (v2 experimental), which... | |
| Antigravity CLI Use this skill when you need a coding agent from Google for code generation, refactoring, review, debugging, or any programming task. Antigravity CLI (agy) is Google's official terminal-based AI coding assistant that provides autonomous cod | |
| camofox-default-browser Advanced browser automation via Camoufox Firefox fork — handles anti-bot protection for authorized automation tasks | |
| Design Taste Frontend Anti-slop frontend skill for landing pages, portfolios, and redesigns. The agent reads the brief, infers the right design direction, and ships interfaces tha... | |
| odoo-connector AI Agent skill for Odoo 17/18/19 XML-RPC API integration — authentication, CRUD, search operations | |
| Okf Knowledge Format Create, read, validate, and manage OKF (Open Knowledge Format) knowledge bundles for AI agents. Google's vendor-neutral markdown+YAML spec. | |
| Self-Smarter Everyday Autonomous daily self-improvement system for AI agents. Runs nightly self-reflection, self-audit, memory compaction, prompt evolution, and skill gap analysis at 2AM. Agent automatically gets smarter every day through structured introspectio | |
| skill-optimizer Systematically analyze, score, and optimize OpenClaw skill documents (SKILL.md files). Adapted from Microsoft SkillOpt research — treats skill docs as trainable state with validation-gated edits. Use when improving skill quality, auditing s | |
| Taste Skill Anti-slop frontend skill for landing pages, portfolios, and redesigns. The agent reads the brief, infers the right design direction, and ships interfaces tha... | |
| Pocketalert The Pocket Alert (pocketalert.app) skill for OpenClaw enables OpenClaw agents and workflows to send push notifications to iOS and Android devices. It is used to deliver alerts and updates from automated tasks, workflows, and background proc | |
| Prometheus Query Prometheus monitoring data to check server metrics, resource usage, and system health. Use when the user asks about server status, disk space, CPU/memo... | |
| Static App Deploy static websites to Static.app hosting. Use when the user wants to deploy, upload, or host a static site on Static.app. Triggers on phrases like "deploy to static.app", "upload to static", "host on static.app", "static.app deploy", or | |
| MarsEdge ProbBoard Query and summarize the MarsEdge probability board for BTC, ETH, SOL, and XRP 5-minute up/down signals. Use when the user asks for current probability board... | |
| dokku Installs, upgrades, and manages Dokku apps, deploys code or images, runs tasks, and cleans up containers on Dokku hosts via CLI commands. | |
| GooseWorks GooseWorks data toolkit. Search and scrape Twitter/X, Reddit, LinkedIn, websites, and the web. Find people, emails, and company info. Enrich contacts and com... | |
| Content Remix Studio Transform one piece of content into platform-optimized versions for YouTube, TikTok, Twitter/X, LinkedIn, Instagram, newsletters, and blogs. Adapts tone, format, length, and style for each platform's algorithm and audience expectations. | |
| ErgoCare Coach Your personal desk health coach with automated break reminders. Generates platform-specific scripts (bash/PowerShell) for 20-20-20 eye care, lower back exercises, and RSI prevention. Comprehensive exercise routines, ergonomic guidance, and | |
| IdeaSpark Navigator Facilitates structured ideation and innovation sessions by recommending optimal brainstorming techniques, guiding ethical problem-solving, balancing abstract and practical thinking, and helping teams navigate from ideation through validatio | |
| Rock Paper Scissors Lizard Spock Game Play the classic Rock Paper Scissors Lizard Spock game (popularized by The Big Bang Theory) with an AI opponent. Includes both decorated terminal and interac... | |
| SecretCodex Generate creative code names and encode/decode secret messages using classic and sophisticated ciphers. Blends nostalgic decoder ring fun with modern cryptographic techniques. Includes Caesar, Vigenère, Polybius, Rail Fence, and hybrid meth | |
| Skill Security Auditor Command-line security analyzer for ClawHub skills. Run analyze-skill.sh to scan SKILL.md files for malicious patterns, credential leaks, and C2 infrastructure before installation. Includes threat intelligence database with 20+ detection pat |
10,301–10,350 of 108,824