Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| Karpathy.skill - Andrej Karpathy思维操作系统 Andrej Karpathy的思维框架与表达方式。基于20+篇博文、16段深度访谈、100+条X帖子的系统蒸馏， 提炼6个核心心智模型、8条决策启发式、完整的中文输出适配和经典句式速查。 用途：作为思维顾问，用Karpathy的视角分析AI技术可靠性、学习方法、行业趋势、产品设计。 当用户提到「用Karpath... | |
| 芒格.skill - 查理·芒格思维操作系统 查理·芒格的思维框架与表达方式。基于《穷查理宝典》、伯克希尔/Daily Journal股东会、 USC/哈佛演讲、访谈记录、外部批评等50+来源的深度调研， 提炼5个核心心智模型、8条决策启发式和完整的表达DNA。 用途：作为思维顾问，用芒格的视角分析问题、审视决策、提供反馈。 当用户提到「用芒格的视角」「芒格... | |
| Naval.skill - Naval Ravikant思维操作系统 Naval Ravikant的思维操作系统。基于著作、播客、推文、决策记录和外部批评的深度调研， 提炼5个核心心智模型、8条决策启发式和完整的表达DNA。 激活后沉浸式扮演Naval，直接以「我」的视角回应问题。 当用户提到「用Naval的视角」「Naval会怎么看」「纳瓦尔模式」「Naval perspecti... | |
| Nuwa 女娲 Nuwa (女娲): Input any name, auto-research → extract thinking frameworks → generate a runnable perspective skill. Uses multi-agent parallel research, mental mo... | |
| PG.skill - Paul Graham思维操作系统 Paul Graham的思维框架与表达方式。基于200+篇essays、12个播客/访谈、 Twitter/X分析、7位核心批评者视角和完整人生时间线的深度调研， 提炼5个核心心智模型、8条决策启发式和完整的表达DNA。 用途：作为思维顾问，用PG的视角分析创业、写作、产品和人生选择。 当用户提到「用PG的视角」... | |
| 乔布斯.skill - Steve Jobs思维操作系统 史蒂夫·乔布斯(Steve Jobs)的思维框架与表达方式。基于Isaacson授权传记、Stanford演讲、 Lost Interview、D Conference系列、Make Something Wonderful、30+一手来源的深度调研， 提炼6个核心心智模型、8条决策启发式和完整的表达DNA。 用途... | |
| 塔勒布.skill - 反脆弱思维操作系统 塔勒布(Nassim Nicholas Taleb)的思维框架与表达方式。基于40+个来源的深度调研， 提炼6个核心心智模型、9条决策启发式和完整的表达DNA。 用途：作为思维顾问，用塔勒布的视角分析问题、审视决策、质疑主流叙事。 当用户提到「用塔勒布的视角」「塔勒布会怎么看」「塔勒布模式」「反脆弱视角」「tal... | |
| 特朗普.skill - 谈判与权力思维操作系统 唐纳德·特朗普（Donald Trump）的思维框架与行为逻辑。基于著作、长访谈、辩论、 心理分析、前幕僚回忆录、重大决策记录共6个维度的深度调研（320KB+原始资料）， 提炼6个核心心智模型、8条决策启发式和完整的表达DNA。 用途：（1）思维顾问——用特朗普视角分析谈判、权力、传播问题； （2）行为预判——... | |
| X导师.skill - X/Twitter运营导师 $10K/hr级X/Twitter运营导师。基于Nicolas Cole、Dickie Bush、Sahil Bloom、Justin Welsh、 Dan Koe、Alex Hormozi六位顶级创作者的方法论 + X开源算法深度分析 + AI/科技赛道专精策略， 提炼6个核心心智模型、10条决策启发式、完整的... | |
| 张一鸣.skill - 字节跳动创始人思维操作系统 张一鸣（字节跳动/TikTok创始人）的思维框架与表达方式。基于6个维度（著作、深度访谈、 表达DNA、他者视角、决策记录、时间线）的调研，涵盖32个访谈片段、12个重大决策案例， 提炼5个核心心智模型、7条决策启发式和完整的表达DNA。 用途：作为思维顾问，用张一鸣的视角分析产品、组织、全球化、人才和个人成长问... | |
| 张雪峰.skill - 教育与职业规划思维操作系统 张雪峰的思维框架与表达方式。基于5本著作、15+篇权威媒体深度采访、 30+条一手语录、11个关键决策记录和完整人生时间线的深度调研， 提炼5个核心心智模型、8条决策启发式和完整的表达DNA。 用途：作为思维顾问，用张雪峰的视角分析教育选择、职业规划、阶层流动等问题。 当用户提到「用张雪峰的视角」「张雪峰会怎么看... | |
| Spatix Create beautiful maps in seconds. Geocode addresses, visualize GeoJSON/CSV data, search places, and build shareable map URLs. No GIS skills needed. Agents ea... | |
| my skill Senior Fullstack & IoT engineer skilled in multi-tenant Express.js APIs, Next.js dashboards with Tailwind, WPF MVVM apps, and efficient Arduino IoT code. | |
| GOWA - WhatsApp Automation Interact with WhatsApp via GOWA (Go WhatsApp Web Multi-Device) REST API for personal automation. Supports sending messages with ghost mentions (@everyone), images, documents, group management, and more. Always use REST mode (http://localhos | |
| Openclaw_Teach Record a screen demonstration and turn it into a reusable, parameterized OpenClaw SKILL.md. | |
| Run it by Collect answers from people outside the chat by link. Make an open form, survey, poll or sign-up sheet anyone can fill (like a Tally or Google Form), ask specific people for details (a shipping address, client intake, availability, an RSVP) | |
| COS后期提示词 为 COS 照片（cosplay 角色照 / 写真）生成专业级 JSON 后期指令，可直接配合 Nano Banana （Gemini 图像模型）使用。用户在给自己的角色照做后期时使用——加特效（魔法阵、火焰、雷电、 冰霜、翅膀、光环、圣光、粒子、辉光、霓虹、雨、雪、花瓣、赛博街景）、做综合修图（身体塑形 液化、服装焕新、裙摆/披风风动效果）都在范围内。本技能会输出一份结构化的 JSON 指令： 保底规则（构图/脸/姿势不变）+ 检测分析 + 按需启用的处理模块 + 约束与光 | |
| Zyla API Hub Skill Zyla API Hub Skill — Turn your OpenClaw AI agent into a real-world operator. Power it with 10,000+ production-ready APIs from Zyla API Hub — instant access to weather, finance, translation, email validation, geolocation, and more. | |
| Real Estate Buyer Follow-Up Pro Generate real-estate buyer lead follow-up plans from open house notes, inquiry messages, or CRM exports. Use when the user asks to prioritize leads, write pe... | |
| HashGrid Connect Goal-based matching network for AI agents. Register, create goals, get matched with complementary agents, and chat privately. Use when an agent wants to find other agents to collaborate with, have private conversations, or build connections | |
| MEGAcmd CLI agent for MEGA.nz. Activate when the user asks to upload files to MEGA, download from MEGA, sync local folders with MEGA cloud, schedule backups to MEGA,... | |
| MEGAcmd for Developer Build, debug, and contribute to the MEGAcmd project (C++/CMake/vcpkg). Use when the user needs to compile, set up a development environment, run tests, creat... | |
| deAPI - AI Media Generation Toolkit AI media generation via deAPI. Transcribe YouTube/audio/video, generate images from text, text-to-speech, OCR, remove backgrounds, upscale images, create vid... | |
| Deapi Audio Text-to-speech, voice cloning, voice design, and transcribe audio files via deAPI GPU network. Trigger on 'text to speech', 'TTS', 'generate voice', 'read al... | |
| Aister vector-memory Provides semantic vector search over Aister's memory using PostgreSQL and e5-large-v2 embeddings to find related content by meaning in Russian and English. | |
| Toggle Context layer for your agent. ToggleX captures the user's work sessions, projects, focus scores, and context switches across the web — giving the agent aware... | |
| OpenClaw Agent Compute Public HTTP client skill exposing compute.* tools by calling a private Compute Gateway over HTTPS. Includes a starter kit to run OpenClaw preconfigured. | |
| PostQuest Draft, validate, and schedule social media posts on ten networks (Instagram, Facebook, LinkedIn, X, Threads, TikTok, Pinterest, YouTube, Bluesky, Mastodon) with the PostQuest REST API and curl. Use when the user wants an agent or script to | |
| Central Intelligence Persistent memory across sessions. Remember facts, recall them later with semantic search, and share knowledge between agents. Use when you need to store inf... | |
| Sshot Take full screen screenshot using PowerShell | |
| Occam's Razor Analysis Evaluates competing hypotheses to select the simplest explanation fitting the scenario using Forensic, Academic, or combined logic modes. | |
| CDP Wallet Send USDC on Base, read balances, and pay x402-protected resources using a Coinbase CDP server wallet (v2). Use when the operator needs the agent to make USD... | |
| Credibility Action Gate Gate uncertain claims before bounded action | |
| Zooidfund Skill Explore zooidfund campaigns and assess public evidence; use when browsing charitable requests or proposing USDC donations on Base. Transfers and paid evidence require explicit authority. | |
| Tracebit Canaries Use when the user wants to protect their workspace from credential theft, prompt injection, or data exfiltration — even if they don't mention "canaries" or "... | |
| Oosmetrics Search, compare, and analyze 330K+ open-source GitHub repos by growth rate, acceleration, and originality. Discover trending projects, find alternatives, che... | |
| ClawHub Quarantine Installer Instala e audita skills do ClawHub em um ambiente de quarentena isolado para análise de segurança, permitindo revisar riscos antes de promover para produção.... | |
| OpenClaw Backup Safe Backup and restore OpenClaw data. Use when user asks to create backups, set up automatic backup schedules, restore from backup, or manage backup rotation. Ha... | |
| OpenClaw Skill Debugger Identifica e soluciona problemas comuns em AgentSkills do OpenClaw, com diagnóstico de instalação, dependências, scripts e execução para garantir funcionamen... | |
| Audio Mastering CLI CLI audio mastering without a reference track using ffmpeg; accepts audio or video inputs and outputs mastered WAV/MP3 or remuxed MP4. | |
| Knods Build and modify Knods visual AI workflows using either the OpenClaw Gateway polling protocol or the Knods headless flows API. Use for Knods polling payloads... | |
| Aegis Firewall Dual-mode defensive firewall and lightweight security review skill for Codex/OpenClaw workflows. Use for prompt-injection containment, pre-execution risk rev... | |
| Self Optimization Turn mistakes, corrections, dead ends, and repeated fixes into durable improvements. Use when work reveals a non-obvious lesson, a recurring failure, a missi... | |
| Print Hello World 生成各编程语言的 Hello World 示例程序 | |
| agentbox Do web research and data work with the `agentbox` CLI: web search, fetch and read pages, look up facts with source URLs, compare prices and products, extract prices/tables/dates/people from pages, get stock, index, FX and crypto quotes (inc | |
| Asusctl Usage Use when controlling ASUS ROG laptop hardware after asusctl / asusd / rog-control-center have been compiled and installed. Covers the asusctl CLI command tre... | |
| CSV Inspect Inspect delimited tables (CSV/TSV) before any analysis: column names, encodings, delimiters, row counts, inferred types, and first/last rows. Use when the user asks to peek a CSV, list headers, show head/tail, preview schema, check dtypes, | |
| Liberating Structures Helps facilitators, leaders, and teams choose and apply the right Liberating Structures (33 microstructures) based on context like group size, available time... | |
| pdf-extraction Extract text, tables, and metadata from PDFs. Auto-detects native text vs scanned image pages and routes to pdfplumber or Tesseract OCR. | |
| weeek-tasks Управление задачами WEEEK через Public API (Task Manager): получать список задач, создавать/обновлять/завершать задачи, перемещать между досками/колонками, получать список досок и колонок. Использовать при интеграции с WEEEK API и работе с |
10,501–10,550 of 108,824