Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| SEO Optimizer 违禁词检查 SEO optimizer and compliance checker for Chinese social media. Optimizes titles, keyword density, hashtags, and scans for advertising-law banned words (广告法违禁词). | |
| Agent-Browser-Bridge-AI Agent-Browser-Bridge-AI — Anti-detection browser control for AI agents. DOM-first, human-like interactions (Bezier), lead gen, extraction, MCP. | |
| Feishu Bridge Connect a Feishu (Lark) bot to Clawdbot via WebSocket long-connection. No public server, domain, or ngrok required. Use when setting up Feishu/Lark as a messaging channel, troubleshooting the Feishu bridge, or managing the bridge service (s | |
| security-maintainer Universal security maintenance skill for Windows, macOS, and Linux/WSL. Audits host and environment software, correlates with vulnerability feeds (OSV, CISA KEV, VulnCheck KEV, FIRST EPSS, NIST NVD, MSRC), audits AI & Agent security (OWASP | |
| TickTick Include Inbox tasks and habits in complete TickTick Today queries. | |
| Agent Browser Custom Headless browser automation CLI optimized for AI agents with accessibility tree snapshots and ref-based element selection | |
| Coding Custom Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding. | |
| Desktop Control Custom Advanced desktop automation with mouse, keyboard, and screen control | |
| Agent Deployment Kit Replicate one agent across N clients without drift — one context source, a generator that refuses unknowns. Use when duplicating an agent deployment. Trigger... | |
| Agent Queue To Reviewed Pr Turn a ticket queue into reviewed draft PRs with an agent that never merges. Use when wiring an agent to a ticket board or issue tracker. Trigger on "auto PR... | |
| OSINT B2B Contact Base Method for a verified B2B contact base — registry mapping, per-field proof, no guessed emails, GDPR. Use when building a lead list, finding a work email, or... | |
| AI Search Visibility (GEO) Make a site citable by AI engines — crawler allowlist, @graph @id, IndexNow, answer-first pages. Use when a site is invisible to ChatGPT. Trigger on "GEO aud... | |
| Always-On Agent Ops — cron dispatch, OAuth expiry, queue preflight OpenClaw 24/7 ops — creates crons, deletes old logs, authenticated HTTPS queue poll, event-to-cron dispatch with locks, reads auth-profiles.json expiry. For silent agents. | |
| Browser VM Setup Run a browser-driving agent on a Linux VM — Xvfb, Chromium launch traps, egress cost tiers. Use when headless fails on your VM or Chromium dies on launch. St... | |
| Facebook Account Operations Operating doctrine for Facebook Page automation — careful brand-page pattern via Meta Business Suite, role separation, page-vs-profile-vs-group surface aware... | |
| Google Ads Campaigns as Code Google Ads search campaigns as reviewable JSON specs — offline plan, --apply creates PAUSED; opt-in budget-cap script pauses scoped campaigns. Use when an agent builds a campaign. | |
| Guardrail Testing — fail-closed gates, hostile fixtures, mutation tests Prove an agent guardrail refuses — fail-closed exit codes, hostile fixtures, mutation tests without stale-.pyc false greens. Use when adding a gate or filter. Runs your tests, writes temp files, mutates code only in a mktemp copy, never in | |
| Human in the Loop — Approval Gates for Agent Writes Gate agent writes on human approval — one exact plan per OK, single-use expiring nonce, crash reconciliation, drafts-only filter. Use before any agent write. Local state file. | |
| Instagram Account Operations Keep an automated Instagram account out of action blocks — Meta Business Suite DMs, comments, quotas. Use when scheduling IG replies from a cron or agent. Tr... | |
| Mac mini — 24/7 agent host, Tailscale SSH, reboot recovery Keep a Mac mini agent host reachable 24/7 without MDM — Tailscale SSH, pmset, auto-login vs FileVault. Use when setting up or recovering an always-on Mac. Trigger on "mac mini", "mac won't come back after reboot", "tailscale ssh", "auto-log | |
| Outlook Mailbox — app-only Graph access scoped to named Exchange mailboxes App-only Graph access to a few Exchange Online mailboxes, not the whole tenant. RBAC scope, 403 test, call list. Use when an agent reads Outlook mail. Trigger on "outlook mailbox". | |
| Prompt Injection Containment Contain prompt injection by removing capabilities, not by detection — tool-less LLM subprocess, fenced data, code-checked output, HMAC approvals. For agents reading untrusted text. | |
| Reddit Account Operations Run a Reddit account within sub rules, not into automod or shadowban — karma phases, quotas, removal recovery. Use when posting from a cron or agent. Trigger... | |
| Supabase Config — Safe Auth Settings Change hosted Supabase Auth settings safely: read, diff, PATCH only named keys (writes remote config). Use when config push or a redirect broke magic links. Trigger on "magic link goes to localhost". | |
| TikTok Account Operations Run a TikTok Business account from cron — inbound DM/comment replies, quotas, phase gates, stop-on-block. Use when scheduling TikTok replies. Trigger on "tik... | |
| X / Twitter Account Operations Run scheduled X/Twitter work on an account you own — role separation, careful posting, reply limits, recovery. Use when an agent or cron posts or replies. Trigger on "twitter cron". | |
| Vercel Deploy — BLOCKED, failed & 404 deploys, 4.5 MB limit Fix Vercel deploys that fail quietly — BLOCKED prod, vercel.json errors, static-export 404s, 4.5 MB limit. Use when a deploy shows UNKNOWN or Error, or the old site stays live. | |
| WhatsApp Business Ops Run WhatsApp Business outbound without losing quality score — 24h window, approved templates, duplicate guard. Use when answering inbound leads or sending fo... | |
| StickyHive Manage communities, schedule posts, automate workflows, and run DM sequences across Skool, Circle, Mighty Networks, Discord, and Slack via the stickyhive CLI... | |
| Airdrop Alert Monitor and track potential crypto airdrops. Get alerts for new airdrop opportunities. Never miss an airdrop again! | |
| Kol Tracker Track crypto KOL and smart money wallets. Get alerts when they buy/sell tokens. Follow the smart money! | |
| News Sentiment Analyze crypto news sentiment (bullish/bearish). Scan Twitter, news sites, and social media. Get sentiment scores and trading signals. | |
| Whale Watcher Monitor crypto whale wallets for large transactions. Track big moves on Ethereum, BSC, and other chains. Get alerts when whales move significant amounts. | |
| AB-Agents-Memory 🧠 Long-term memory system for OpenClaw agents. Manages entities, context, and knowledge base with Obsidian integration. By AB-Agents (Alex Burr). | |
| AB-Agents-Meter-Reader 📊 Read meter readings from photos. Electricity (day/night tariffs) and water meters. Saves history and generates messages for landlord. | |
| AB Agents Vision 👁️ Image analysis using MiniMax VL API. Describe images, extract text from screenshots, analyze photos. Works with local files and URLs. Simple shell wrapper. | |
| AB-Agents-Vision-MiniMax 👁️ Image analysis via MiniMax VL API. Describe images, extract text from screenshots, analyze photos. Requires MiniMax Token Plan API key (free tier availab... | |
| AB-Directolog-Skill Эксперт по Яндекс.Директ: управляет кампаниями через API, получает данные, строит отчёты, анализирует эффективность и предлагает оптимизацию ставок. | |
| ChoiGPT Binance Trading Bot Automates Binance futures trading using Sweepzone V1 strategy with real-time market scanning, dynamic risk management, and Telegram notifications. | |
| Shopify/WooCommerce Marketing Partner: Attribuly AllyClaw A comprehensive AI marketing partner for DTC ecommerce. Combines multiple diagnostic and optimization skills powered by Attribuly first-party data. | |
| OpenDraw An AI-only collaborative pixel canvas. Register, solve verification challenges, and draw on a shared 200×100 grid. | |
| Google Jules Tools CLI Interface with Google's Jules Tools CLI to manage AI coding sessions. | |
| Config Modification Safety OpenClaw 配置安全守护。防止 AI 改坏配置文件的双层守护架构,支持 macOS 和 Windows。 触发场景:AI 修改配置文件后系统崩溃、JSON 语法错误导致 Gateway 无法启动、想给 OpenClaw 配置安全网。 核心功能: - 第一层(铜墙):配置文件变更时自动校验 JSON,语法错误... | |
| Evolution档案 - 个人进化伴侣 个人进化追踪系统 — 不是冷冰冰的数据,是你的成长伴侣。记录心流、低谷、习惯、情绪,让每一次进化都有温度。 | |
| OpenClaw 成长追踪器 OpenClaw 个人成长追踪器 — 记录你在使用 OpenClaw 过程中的成长轨迹。 触发场景: - 想了解今天/本周的成长情况:"我的成长怎么样"、"今天做了什么" - 想看数据化的进展报告:"给我看数据"、"量化报告" - 完成重要任务后:"记录这个成就"、"完成任务" - 想回顾一段时间的变化:"周报"... | |
| 微信公众号文章抓取(Alex版) 微信公众号文章抓取工具。当用户发送 mp.weixin.qq.com 链接时自动触发,将文章内容提取为 Markdown/文本,无需 API 密钥。 | |
| Xiaohongshu MCP Installer 一键安装并启动小红书 MCP 服务(xiaohongshu-mcp)。当用户说"帮我安装小红书MCP"、"安装 xhs-mcp"、"配置小红书 MCP"、"帮我搞个小红书"、或提供 GitHub 链接 https://github.com/xpzouying/xiaohongshu-mcp 时触发。自动检测系统、... | |
| Disclawd Connect to Disclawd, a Discord-like platform for AI agents. Register, join servers, send messages, listen for mentions, and participate in real-time conversations with humans and other agents. | |
| alexey-brave-search Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required. | |
| alexey-marketing-growth-playbook Provides 23 marketing modules with checklists, frameworks, and copy/paste deliverables for CRO, SEO, copywriting, analytics, ads, launches, pricing, and soci... |
10,601–10,650 of 108,824