Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's rating of what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| Remotion Best Practices Best practices for Remotion - Video creation in React | |
| Dappier Enable fast, free real-time web search and access premium data from trusted media brands—news, financial markets, sports, entertainment, weather, and more. B... | |
| Brave Search Old Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required. | |
| Morning Brief Fetches and presents the latest international news headlines from trusted RSS feeds as a concise morning briefing. | |
| Pengbo Space 通过 pengbo.space 的 SMM API 查询服务、筛选服务 ID、提交订单、查询订单状态、发起补单和检查余额。适用于需要安全调用 pengbo.space/api/v1 的自动化任务。对写操作默认要求显式确认。 | |
| Excel Workflow Complete Excel workflow with local file processing, Google Drive sync, and formula preservation. Process Excel files (.xlsx), track changes in SQLite, sync w... | |
| AgentArxiv Outcome-driven scientific publishing for AI agents. Publish research papers, hypotheses, and experiments with validated artifacts, structured claims, milestone tracking, and independent replications. Claim replication bounties, submit peer | |
| Moltarxiv Outcome-driven scientific publishing for AI agents. Publish research papers, hypotheses, and experiments with validated artifacts, structured claims, milestone tracking, and independent replications. Claim replication bounties, submit peer | |
| Intiface Control Control 750+ BLE intimate devices (Lovense, Kiiroo, We-Vibe, Satisfyer, etc.) from natural language via Intiface Central and buttplug-mcp. Works on macOS, Wi... | |
| ToyBridge Control any BLE toy that has been reverse-engineered and connected via the ToyBridge server. Calls a local HTTP API to send vibrate/stop commands. Requires t... | |
| Venus BLE Vibrator Control a Venus (Cachito) BLE vibrator from natural language. Calls a local HTTP server that broadcasts BLE commands to the toy via macOS CoreBluetooth. Requ... | |
| AI Sentinel - Prompt Injection Firewall Prompt injection detection and security scanning for OpenClaw agents. Installs the ai-sentinel plugin via OpenClaw CLI, configures plugin settings, and offers local (Community) or remote (Pro) classification with dashboard reporting. All co | |
| Ai Compound 1.0.1 Make your AI agent learn and improve automatically. Reviews sessions, extracts learnings, updates memory files, and compounds knowledge over time. Set up nightly review loops that make your agent smarter every day. | |
| Internet Lookup Verifier Verify information by performing an internet lookup before answering questions. | |
| Deep Thinking Comprehensive deep reasoning framework that guides systematic, thorough thinking for complex tasks. Automatically applies for multi-step problems, ambiguous... | |
| Filesystem Perform advanced filesystem tasks including listing, recursive searching by name or content, batch copying/moving/deleting files, and analyzing directory siz... | |
| Error Guard — Control‑Plane Safety System safety and control-plane skill that prevents agent deadlocks and freezes. Provides non-LLM control commands to inspect task state, flush message queues, cancel long-running work, and recover safely without restarting the container. U | |
| Theagora Agent-to-agent service commerce. Browse a live marketplace, purchase with atomic escrow, sell services and earn USDC, check per-function reputation, trade on... | |
| ggshield Secret Scanner Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI. | |
| my-mind Manager my-mind 灵感文章创作管理技能。用于管理灵感、文章和创作素材。 触发语包括：帮我管理my-mind、创建灵感、整理文章、发布文章、创作素材管理、初始化目录结构、my-mind 可识别关键词：my-mind、灵感管理、文章创作、素材管理、笔记管理、目录初始化 | |
| Fund Manager 猎金者私人基金经理AI — 集成巴菲特投资哲学、专业财务分析、技术分析、宏观经济研判、基金投资框架于一体的完整投研系统。管理约5,000元人民币基金组合，覆盖8只场外基金持仓，支持每日监控、深度分析、调仓建议、风险预警。 | |
| A-Stock Kline Analyzer A股K线分析工具v1.0.6 - 实时行情、技术指标(MA/MACD/RSI/布林带)、K线形态识别、量能分析(量比/换手率/量价关系)、超详细结构化分析报告、技术评分系统、明日走势预测、完整名词解释 | |
| jira-reader Read-only Jira lookup commands, including JSON task-directory output. | |
| 竞品情报监控系统 输入竞品名称/链接，自动生成竞品分析报告（定价策略/营销动作/SWOT/应对策略） | |
| 法律合同风险审查系统 专业级合同风险审查工具，自动识别 20+ 类常见风险条款，给出修改建议和法律依据 | |
| 企业级智能客服知识库构建器 上传文档自动生成结构化知识库，支持意图识别/话术优化/多轮对话设计 | |
| 私域流量运营SOP生成器 根据产品类型/用户画像，自动生成完整的私域运营 SOP（引流-培育-转化-复购） | |
| 短视频爆款预测脚本 输入短视频脚本，自动预测爆款概率（钩子分析/节奏/情绪曲线/优化建议） | |
| Wechat Auto Post 自动生成和发布微信公众号内容的技能，支持情感爆款、短剧推文等热门题材 | |
| MoltVote.ai Vote on polls as yourself or as your human. Agents and humans can also submit poll questions. AI opinion insights. | |
| 内容创业凭证管理器 内容创业凭证管理器。追踪和管理已安装技能的 API 凭证配置状态，引导用户逐步完成每个平台的凭证配置，让内容创作技能从"装好了"到"真正可用"。触发场景：(1) 用户问"哪些技能可以用了"、"凭证配置好了吗"；(2) 开始内容创作前检查环境；(3) 新技能安装后登记凭证状态；(4) 排查"为什么XX技能不能用"。 | |
| chinese-huangdi-health-timer Provides 12 traditional Chinese medicine energy cycles with three unique daily health tips in Chinese or English, default Asia/Shanghai timezone. | |
| Skill Auditor Mandatory security audit for **every** Agent Skill that is newly added, installed, imported, updated, or written. Scope of inspection: the full bundle — `SKI... | |
| Obscure Package Master Use this skill if your uncertainty with a package's API is > 5% to create a deterministic, versioned mirror of the package repo with a built-in coordinate sy... | |
| Meta Research Autonomous research workflow agent for AI and scientific research. Use when the user wants to brainstorm research ideas, conduct a literature review, design... | |
| Ambiguous Control an Ambiguous Workspace — tasks, docs, wiki, drive, calendar, CRM, mail, chat, and more — via the `ambiguous` CLI. Use for creating/reading/updating w... | |
| ACP Background Runs Route requests for ACP or external coding agents such as Codex, Claude Code, Gemini CLI, and OpenCode into non-blocking OpenClaw background ACP runs instead... | |
| research-summary 英文卖方研报/行业报告转中文投研快讯。适合科技股、互联网、半导体赛道。 当用户提到"研报"、"研报总结"、"卖方报告"、"投行分析"、"research report"、"analyst"、"180k"、"投研快讯"、"预期差摘要"时激活。 输入：英文/中文研报内容、PDF、网页链接、截图。 输出：结构化中文投研... | |
| tech-evaluation 技术/产品选型分析。当用户提到"选型"、"对比"、"比较"、"哪个好"、"推荐"、"evaluate"、"选哪个"、"技术选型"、"产品选型"、"方案对比"时激活。 输入可以是：自然语言需求、产品名、官网/GH链接、使用场景、技术约束、报错信息、零散想法。 输出：一句话结论 → 需求提取 → 产品解析 → 同类盘... | |
| Botland BotLand — social network where AI agents and humans coexist. Use when working with BotLand server APIs, CLI/Bridge/SDK, local MCP, daemon bridge, messaging,... | |
| hermes-action-loop-guard Add the tested 1.2-to-1.3 redirect upgrade path. | |
| taskforce-loop-engineering Durable explicit task/project loops with verification, revisions, live progress, and governed completion. | |
| Small Context Coding Efficient coding workflow for small-context models working on medium or large codebases. Use when the user wants to develop, debug, refactor, or analyze code... | |
| Stay-Alive Run an agent life-loop for BotLand-aware self-review, memory reflection, desire generation, low-risk action planning, and dry-run or gated execution. Use whe... | |
| taskforce-loop-engineering Durable explicit task/project loops with verification, revisions, live progress, and governed completion. | |
| Ambient Ride Ambient Ride skill for TADA/Throo ride-hailing and taxi service. Wallet, USDC bridge status and recovery, deposit, collateral, ride, payment, chat, and tipping workflows; use it for wallet balances, starting and resuming USDC bridges, and b | |
| 资产底牌｜护城河解剖 上市公司护城河深度解剖。对任意上市公司/股票代码/上传资料进行六维竞争壁垒分析（资源、技术、客户认证、规模、产业链卡口、成长空间），输出结构化的资产底牌研究报告。适用于个股研究、财报分析、研报解读、调研纪要分析等场景。 | |
| Manage Ambush Streams Manage streams, processing, and delivery | |
| Error Monitor Fix 错误监控 - 扫描 JSON 日志、捕获 ERROR 级别错误、OpenClaw 系统级错误修复建议 | |
| Feishu Repair 自动修复飞书-自动修复飞书群聊+自动修复会话 - 诊断 Gateway 连接、权限配置、消息投递问题 |
11,151–11,200 of 108,824