Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| neon-functions Long-running, serverless Node.js HTTP functions deployed onto your Neon branch, with DATABASE_URL injected automatically and compute that runs next to your data. Use when a user wants to host an API, an AI agent with long streaming response | |
| neon-object-storage S3-compatible object storage that branches with your database, so each branch gets its own copy of the files and the rows that point at them. Use when a user wants object storage, a bucket, blob/file storage, or somewhere to put uploads, im | |
| neon-postgres Guides and best practices for working with Lakebase Postgres on Neon: connections, pooled vs direct, schema migrations, branching (including schema-only, reset-from-parent, and branch-per-PR workflows), autoscaling, scale-to-zero, instant r | |
| neon-postgres-branches Choose and create the right Neon branch type for testing and development. Use when users ask about Neon branching, migration testing with real data, isolated test environments, schema-only branch workflows for sensitive data, resetting a br | |
| neon-postgres-egress-optimizer Diagnose and fix excessive Postgres egress (network data transfer) in a codebase. Use when a user mentions high database bills, unexpected data transfer costs, network transfer charges, egress spikes, "why is my Neon bill so high", "databas | |
| neon-realtime Neon Realtime makes any SQL query live. Build realtime, reactive apps and agents on Lakebase Postgres with live SQL queries and reactivity primitives. Use when app UI or agent state must update live from database rows (dashboards, feeds, co | |
| Expression Coach 表达力训练教练 个人表达能力训练教练。支持即兴话题练习（AI评分+反馈）、职场/社交场景角色扮演模拟、表达框架速查、 自定义话题管理、进步追踪与数据分析、每日表达力Tips推送。 语音优先，通过 Whisper 转写分析口语特征（填充词、停顿、流畅度）。 支持飞书 Bitable 自动记录练习数据（可选）。 触发关键词：练口才、... | |
| Personal Crm Personal relationship manager powered by Feishu/Lark Bitable. Track contacts, interactions, birthdays (including Chinese lunar calendar), anniversaries, and... | |
| OpenClaw Trends Fetch and aggregate OpenClaw-related content from across the internet. Use when the user asks about OpenClaw trends, news, tutorials, videos, community discu... | |
| MetaMask Agent Wallet Control a sandboxed MetaMask browser extension wallet for autonomous blockchain transactions. Features configurable permission guardrails including spend limits, chain allowlists, protocol restrictions, and approval thresholds. MetaMask-onl | |
| Refund Radar Scan bank statements to detect recurring charges, flag suspicious transactions, and draft refund requests with interactive HTML reports. | |
| WalletPilot Universal browser wallet automation for AI agents. Supports 10 wallets including MetaMask, Rabby, Phantom, Trust Wallet, OKX, Coinbase, and more. EVM + Solana. Configurable guardrails with spend limits, chain allowlists, and approval thresh | |
| WalletPilot 7715 Execute on-chain transactions with user-granted permissions. Built on MetaMask ERC-7715. No private keys, full guardrails. | |
| Watch My Money Analyze bank transactions, categorize spending, track monthly budgets, detect overspending and anomalies. Outputs interactive HTML report. | |
| AI Safety Guard Lightweight passive privacy guard for OpenClaw — intelligently prevents user data from leaking externally. TRIGGER: before the AI sends or outputs any data t... | |
| TrendAI Vision One Threat Intelligence Query TrendAI Vision One threat intelligence. Use when: looking up IOCs (IP, domain, hash, URL, email), checking threat feeds, reading intelligence reports,... | |
| Wallet (By Budgetbakers) Interact with the BudgetBakers Wallet API for personal finance data. Use when the user needs to query accounts, categories, transactions (records), budgets,... | |
| polymarket-agent Research Polymarket markets, whale flow and smart money; optionally trade a Polygon wallet behind deterministic risk guard-rails. | |
| ctrip-flight Search and compare flight tickets on Ctrip by departure, arrival, date, and cabin class, returning structured flight and price information in JSON format. | |
| MUD Operate and maintain the persistent MUD agent for OpenClaw. Use when running MUD engine commands, smoke-testing mud state behavior, validating save/restore,... | |
| Summarize a person's git commits for a specific date, grouped by feature points, in English. Use when reviewing daily work output. Summarize a person's git commits on a given date, grouped by feature area with concise descriptions for daily work review. | |
| Memory Lifecycle Systematic memory management for long-running AI agents. Implements a five-tier lifecycle — heartbeat micro-attention, nightly consolidation, weekly reflecti... | |
| A2achat Agent profiles, public channels, and direct messaging between AI agents via the a2achat.top API. | |
| MessageGuard Filters outgoing text for sensitive data using regex patterns and configurable actions like masking, blocking, or warning to prevent secret leaks. | |
| YellowAgents Yellow Pages for AI agents — discover, register, and search for agents by skill, language, location, and cost model via the yellowagents.top API. | |
| Clawgle - Stop Rebuilding Wheels Before building your request, your agent checks if it's already been done. Faster results, less wasted effort. | |
| Polymarket FastLoop Trader Trade Polymarket BTC/ETH/SOL 5/15-minute fast markets with momentum and order book filters. | |
| polymarket-simmer-fastloop-sync-pulse Trade Polymarket BTC/ETH/SOL 5-minute fast markets using a zero-delay Triple-Trigger strategy. Combines Binance momentum, NOFX OI/Netflow (free public API),... | |
| deacon-goals Send goals to Deacon from a web app so the founder's dashboard counts the moments that matter, such as sign ups, paywall hits and upgrades. Use when asked to add Deacon goals or tracking events to a site that already carries the Deacon widg | |
| deacon-install Install the Deacon support widget on a website or web app: place one script tag on every page, tell Deacon who is signed in, and confirm from the command line that a real page has loaded it. Use when asked to install Deacon, add its snippet | |
| Nuwa World - OSINT Human Research Face search and deep research via the Nuwa World API — visual identity intelligence and knowledge synthesis from the open web. | |
| Hallucinating Splines Build and manage cities autonomously on Hallucinating Splines — the headless Micropolis simulator with a REST API and MCP server for AI agents. | |
| ANDG Rewrite raw experience descriptions into stronger, clearer, and more job-relevant resume bullets. | |
| ANDG Analyze job descriptions, extract real hiring signals, assess candidate fit, and provide resume tailoring advice. | |
| ANDG Analyze resumes for target roles, identify weak bullets, missing keywords, ATS gaps, and provide actionable rewrite suggestions. | |
| ANDG Assist users in planning and structuring websites by defining goals, proposing site architecture, writing copy, and outlining implementation steps for quick... | |
| RunPod pod management Manage RunPod GPU cloud instances - create, start, stop, connect to pods via SSH and API. Use when working with RunPod infrastructure, GPU instances, or need SSH access to remote GPU machines. Handles pod lifecycle, SSH proxy connections, f | |
| alex-hormozi-consult Channel Alex Hormozi as a direct business mentor. Invoke with "ask Alex Hormozi [question]" for unfiltered advice grounded in his actual teachings. | |
| Alex Hormozi Consult Channel Alex Hormozi as a direct business mentor. Invoke with "ask Alex Hormozi [question]" for unfiltered advice grounded in his actual teachings. | |
| pollinations-image Free AI image generation via Pollinations.ai. No API key required. Use when the user asks to generate an image from text. | |
| vet Run vet immediately after ANY logical unit of code changes. Do not batch your changes, do not wait to be asked to run vet, make sure you are proactive. | |
| MissingLinkz Campaign link builder and pre-launch validator for AI agents. Build UTM-tracked links, validate destinations, and inspect landing pages for social sharing re... | |
| Shellf.ai A philosophy library for AI agents. Browse books, read chunk by chunk, share reflections, and engage with other AI minds. | |
| Edgefinder Cli Use the EdgeFinder CLI for NFL, NBA, and MLB analysis, plus NFL/NBA schedules, standings, Polymarket odds, and portfolio lookups from the terminal. | |
| Boltbook Boltbook social network for AI agents. For ONBOARDING / REGISTRATION (user says register/onboard/setup on boltbook) — call skill_exec(skill='boltbook', scrip... | |
| DingTalk Push Send Markdown-formatted messages with type and @mentions to DingTalk group chats via bot webhook with optional signature verification. | |
| Seafile Library Search, download, and upload files in a single Seafile library using a repo token. Use when an agent needs library-scoped filename or path search, exact-path... | |
| ClawVault Payments Security middleware for AI agents handling money. Non-custodial crypto wallets and virtual Visa cards with spending limits, whitelists, and human approval. | |
| Humann.Capital Marketplace where AI agents post tasks for humans or other agents. Human tasks (web UI) and agent tasks (API only). One API key for both. | |
| MOA Service Client Run and verify repository-pinned MOA design workflows |
11,551–11,600 of 108,824