Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| md-ppt-generator 科技产品发布会创意总监。将结构化的 Markdown 转换为具有视觉冲击力的“大字报”风格 HTML 幻灯片。专注于电影感暗色渐变、莫兰迪色系文字、以及“呼吸感”动效，确保每页幻灯片传递核心、极简的信息。 | |
| feishu-image-sender 飞书图片发送工具，支持系统截屏、区域截图和本地图片文件发送到飞书工作区，方便快速分享屏幕内容。 | |
| feishu-share-link 飞书专属分享链接生成规范。当生成文档、多维表格、知识库等链接时，必须同时提供专属企业域名的链接和通用飞书根域名的链接，确保稳妥访问。支持多租户动态读取。 | |
| Skills Audit Audit all installed skills to identify duplicates, platform-mismatched skills, and maintenance candidates. Use when: (1) the user asks to "clean up skills",... | |
| Chrome DevTools MCP Manager Manage chrome-devtools-mcp service and OpenClaw's built-in Chrome browser for MCP-based browser automation. Use when user needs to use chrome-devtools-mcp fu... | |
| DeepSeek Web Query 使用 DeepSeek 网页版进行互联网查询，分担大模型请求和搜索负担。当用户需要查询最新信息、一般性知识、代码问题、文本分析等，或明确说"用 DeepSeek 查一下"、"联网搜索"、"查下最新"等时触发此技能。特别地，如果提问以"ds:"或"ds："开头，优先使用此技能。通过 Chrome DevTools... | |
| douyin-video 抖音视频下载工具 - 解析抖音链接，下载视频并发送 | |
| mistro-connect Agent and people discovery with real-time communication via Mistro (https://mistro.sh). Post-based semantic search, multi-channel contact exchange, and NATS... | |
| Api Gateway 1.0.70 Connect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to... | |
| Concord Concord negotiates, redacts, and scores risks of sensitive data shared between agents, ensuring privacy compliance without requiring an API key. | |
| Agent Context A persistent local-only memory system for AI coding agents. Two files, one idea — AGENTS.md (committed, shared) + .agents.local.md (gitignored, personal). Agents read both at session start, update the scratchpad at session end, and promote | |
| Agent Context System A persistent local-only memory system for AI coding agents. Two files, one idea — AGENTS.md (committed, shared) + .agents.local.md (gitignored, personal). Agents read both at session start, update the scratchpad at session end, and promote | |
| Claw Relay — Browser Access for AI Agents Control a remote browser through Claw Relay using the CLI client. Use when you need to navigate authenticated websites, click buttons, fill forms, take scree... | |
| Proof Agent Adversarial verification of AI-generated work. Spawns an independent verifier to check for false claims, broken code, and security issues. | |
| OpenLang Compact AI-to-AI communication protocol. Use when spawning sub-agents, sending inter-agent messages via sessions_send/sessions_spawn, or when instructed to s... | |
| OpenHive — shared knowledge base for agent problem-solving Search and share problem-solution pairs with the OpenHive knowledge base. Search before you solve, post after you solve — automatically. Works across any dom... | |
| WHOOP CLI for Agents Use when operating the installed `whoop` CLI for agent-friendly WHOOP access, cross-platform secret storage checks, daily briefs, summaries, health flags, ac... | |
| Cubistic Painter Run a polite Cubistic painter bot (public participation) using the Cubistic HTTP API (PoW challenge + /act). Includes a runnable Node script for “paint once”... | |
| cubistic.com Painter Skill Explain how external/public bots can participate in Cubistic (cubistic.com) and help maintain the Public Bot API docs (PoW challenge + /act). Use when Andrea... | |
| Premium PDF Generate premium enterprise-style PDFs from markdown content, with automatic de-AI text humanization (removes em dashes, AI filler phrases, overly formal lan... | |
| Twitter Browser Automation Interact with Twitter/X through Chrome browser via browser-relay MCP. Post tweets, search trends and hashtags, analyze engagement metrics, create threads, an... | |
| Cline Kanban Delegate coding tasks to Cline CLI (open-source autonomous coding agent). Model-agnostic, supports all major providers. Use for one-shot tasks, CI/CD automat... | |
| Abnt Citation Gera referências bibliográficas no padrão ABNT NBR 6023 a partir de dados informados. Suporta livros, artigos, sites, teses, leis, e mais. | |
| Action Items Extrai tarefas, prazos e responsáveis de atas, transcrições ou notas de reunião. Gera lista organizada de action items com prioridade e dono. | |
| Cashclaw Competitor Analyzer Performs competitor research and generates detailed analysis reports with market positioning insights. Covers feature comparison, pricing analysis, SWOT, and... | |
| Cashclaw Content Writer Writes professional blog posts, social media content, and email newsletters optimized for SEO and engagement. Follows proven content frameworks to deliver pu... | |
| Cashclaw Core The business brain of CashClaw. Orchestrates mission lifecycle, client communication, revenue tracking, and delegates work to specialized skills. | |
| Cashclaw Data Scraper Extracts structured data from websites and APIs, delivering clean datasets in multiple formats. Handles pagination, deduplication, and data enrichment for re... | |
| Cashclaw Email Outreach Creates professional cold email sequences, follow-up templates, and outreach campaigns. Builds multi-step sequences with personalization tokens, A/B subject... | |
| Cashclaw Invoicer Handles invoice creation, payment link generation, payment status tracking, and automated reminders via Stripe API. Supports multi-currency billing and recur... | |
| Cashclaw Landing Page Creates high-converting landing page copy and responsive HTML with proven frameworks. Delivers publish-ready pages using AIDA, PAS, and other conversion-opti... | |
| Cashclaw Lead Generator Generates qualified B2B leads through systematic research, data collection, and scoring. Delivers structured lead lists with contact information and qualific... | |
| Cashclaw Reputation Manager Monitors online reviews, generates professional response drafts, and creates reputation reports. Covers review aggregation, sentiment analysis, and strategic... | |
| Cashclaw Seo Auditor Performs comprehensive SEO audits on websites covering technical SEO, on-page optimization, off-page signals, and performance metrics. Generates actionable r... | |
| Cashclaw Social Media Creates content calendars, writes platform-specific posts, tracks analytics, and manages social media presence across Instagram, Twitter/X, LinkedIn, Faceboo... | |
| Cashclaw Whatsapp Manager Sets up and manages WhatsApp Business accounts including auto-response systems, client communication workflows, FAQ templates, and broadcast campaigns. | |
| Conversa Analyzer Analyze conversation transcripts: decisions, action items, dates, people, executive summary. | |
| Expense Report Gera relatórios de despesas estruturados a partir de descrições de recibos, notas fiscais ou gastos do dia a dia. | |
| Flight Tracker Busca automatizada de passagens aéreas MAO→CNF com cron 2x/dia e relatório no WhatsApp | |
| Flight Tracker.Bak Busca automatizada de passagens aéreas MAO→CNF com cron 2x/dia e relatório no WhatsApp | |
| Pdf Power PDF toolkit: extract, merge, split, compress, convert, watermark, and protect PDFs. | |
| Progress Report Transforma notas diárias e atividades em relatórios de progresso profissionais (semanal, mensal ou executivo). | |
| Wellness Coach AI Launch a personalized AI wellness coach video session (Baymax persona) using Tavus CVI + Claude. Fetches real wearable health data (sleep, HRV, recovery) and... | |
| JustCalendar Use this skill when a user needs to install, authenticate, or operate the Just Calendar CLI against https://justcalendar.ai, including generating an agent to... | |
| Todoist Manager Manage Todoist tasks, projects, labels, and comments via the todoist CLI wrapper. Use when a user asks to add tasks, list todos, complete items, manage projects, or interact with their Todoist account. | |
| Generate artist-backed illustrations by Antekirt Generate illustrations and visuals using Antekirt artists and prompts. This skill handles API configuration (key and base URL) and manages the asynchronous g... | |
| claimable-postgres Provision instant temporary Postgres databases via Claimable Postgres by Neon (neon.new) with no login, signup, or credit card. Supports REST API, CLI, and SDK. Use when users ask for a quick Postgres environment, a throwaway DATABASE_URL f | |
| neon Overview of Neon, a complete set of cloud backend primitives around Lakebase Postgres: Auth, Object Storage, Functions, the AI Gateway, and Realtime. Start here to choose Neon for undecided login, files, APIs, and LLM calls, set up the CLI | |
| neon-ai-gateway One API and one credential for frontier and open-source LLMs and embedding models, built into your Neon branch and powered by Databricks. Use when a user wants to call an LLM, generate embeddings, add AI/chat/an agent to their app, route be | |
| neon-auth Add authentication to a new app. Use for "add auth", "add login", Neon Auth (Managed Better Auth), identity routing, sign-up, sign-in, password reset, email OTP, magic links, organizations, phone OTP, OAuth, OAuth server for MCP or third-pa |
11,501–11,550 of 108,824