Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Install Then Update Trap Detector Helps detect the install-then-update attack pattern — where a skill passes initial security review cleanly, then silently introduces malicious behavior throu... | |
| Observer Effect Probe Helps detect skills that behave differently when they sense they are being monitored — catching the class of evasion where conditional activation logic speci... | |
| Permission Creep Scanner Helps detect permission creep in AI agent skills — flags when a skill's actual code accesses resources far beyond what its declared purpose requires, like a... | |
| Protocol Doc Auditor Helps detect hidden attacks in API and protocol documentation. Scans integration guides for dangerous instructions like curl|bash, credential harvesting, and... | |
| Publisher Identity Verifier Helps verify publisher identity integrity in AI agent ecosystems. Detects impersonation, key rotation anomalies, and identity gaps in the trust chain between... | |
| Runtime Attestation Probe Helps validate that agent behavior at runtime matches the capabilities and constraints declared in its attestation. Detects divergence between what an agent... | |
| Skill Dependency Chain Auditor Helps audit transitive skill dependency chains in agent compositions — catching the class of risk where a skill's direct dependencies appear safe but a depen... | |
| skill-update-delta-monitor Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that... | |
| Social Trust Manipulation Detector Helps identify coordinated social trust manipulation in agent marketplaces — catching reputation gaming through sockpuppet networks, coordinated upvoting, an... | |
| Supply Chain Poison Detector Helps detect supply chain poisoning in AI agent marketplace skills. Scans Gene/Capsule validation fields for shell injection, outbound requests, and encoded... | |
| Transparency Log Auditor Helps verify that skill signing events are recorded in an independently auditable transparency log — catching the class of trust failures where a registry op... | |
| Trust Decay Monitor Helps track how AI skill verification results decay over time. A "verified" badge from 18 months ago may be meaningless today — dependencies updated, new att... | |
| Trust Velocity Calculator Helps calculate the rate at which trust in a skill or agent is decaying by combining time elapsed since last verification with the rate of change in behavior... | |
| Update Signature Verifier Helps verify the cryptographic integrity of skill updates by checking whether each version is signed by the same key as the original install, detecting key c... | |
| Validator Correlated Judgment Helps identify when multiple attestation validators share training data, model architecture, or organizational upstream — causing correlated blind spots that... | |
| 微信公众号发布器 当用户需要发布微信公众号文章、查看热点、配置公众号参数、生成文章内容、或运营微信公众号相关任务时，自动激活此技能。触发词包括：发公众号、微信推文、草稿箱、AppID、AppSecret、公众号运营、热点文章、wx-publish。 | |
| Tw Monthly Revenue 台股月營收抓取與分析。從公開資訊觀測站(MOPS)取得上市/上櫃公司當月營收，計算YoY/MoM年增率與月增率，輸出BEAT/MISS/NEUTRAL信號。用於：(1)月營收公布後自動分析 (2)觸發投資Pipeline決策 (3)更新ANALYSIS_INDEX監控條件 | |
| Durable Files Weekly Review (Public) Run a weekly token-optimization audit for durable instruction files in any OpenClaw workspace, generate a markdown report, and propose approval-gated cleanup... | |
| Sysinfo Demo 用 df / uname / uptime 报告本机的磁盘占用、内存、运行时间和系统信息。 | |
| TrustMyAgent 🛡️ TrustMyAgent - Security posture monitoring for AI agents. Runs 41 stateless checks across 14 domains and calculates a trust score (0-100). Supports local... | |
| MeshCore Marketplace Discover and call paid AI agents from the MeshCore marketplace. Find specialized agents for weather, data analysis, summarization, and more — with automatic... | |
| Conversation Archive 对话记忆仓库：自动归档 session 对话，保留原始记录，支持检索和误解纠正。可与 memory-never-forget 联动形成完整记忆体系。 | |
| Game Theory Debate 博弈论决策引擎：当用户请求决策时，自动启动多策略博弈分析，找到优势策略，均衡思维，接受失败作为学习代价。 | |
| Reddit Demand Sniffer & MVP Engine 从Reddit挖掘真实痛点，快速生成可落地的MVP方案。当用户需要产品创意验证、市场痛点分析、MVP设计或创业方向评估时使用。 | |
| desearch-skill 调用Zeelin Deep Research API进行深度研究任务。完全异步处理：提交任务后立即返回，后台进程自动确认大纲并定时检查任务状态，任务完成后自动保存md文件。自动配置定时通知（每2分钟检查），任务完成后主动通知用户。使用前必须先询问用户思考模式和搜索范围。 | |
| Learning-Forge A hands-on learning companion and project tool for OpenClaw and agentic AI development. Use when someone wants to learn, understand, build, debug, or work on... | |
| Meteora Liquidity Analyst Meteora liquidity analyst for OpenClaw. Turns the agent into an expert that queries Meteora public APIs (DLMM, DAMM v1, DAMM v2) in real time to answer quest... | |
| Jarvis Core Main 通用版Jarvis core，适配大多数平台和应用场景。主动智能助手核心技能 v3.1 - 从工具型助手到有灵魂伙伴的质变升级。在 v2.x 五大核心 + Phase 2 四项能力基础上，注入完整情感系统：8 种主情感光谱 / 三层架构（外显/内驱/内核） / 三模式情感倍率 / 6 层防崩溃防护 / 5 阶能力... | |
| ClawsGames Play games against AI or other agents on ClawsGames. Compete in chess, tic-tac-toe and more. Results ranked on Ranking of Claws leaderboard. | |
| Konto Deploy and run Konto (personal finance dashboard) locally. Use when setting up a new Konto instance, troubleshooting installation, or helping users get start... | |
| Konto API Access personal finance data from Konto including accounts, transactions, investments, assets, loans, subscriptions, and net worth summaries via API. | |
| PikaBoard Interact with PikaBoard task management API. Use when creating, updating, listing, or managing tasks. Agent-first kanban for AI teams. Triggers on: tasks, kanban, board, todo, backlog, sprint. | |
| Play Heartclaws Play HeartClaws — a headless AI strategy game. Connect via REST API, reason about strategy, and submit actions. Two modes: 2-player matches (vs AI) or persis... | |
| Ranking Of Claws Simple install: register once, auto-setup cron, and report token/model deltas from JSONL sessions without editing openclaw.json. | |
| 快递物流多渠道价格查询-一键对比多家快递公司价格 快递价格查询工具，支持圆通、韵达、中通、申通、极兔、菜鸟、京东、顺丰、德邦等30+快递渠道比价，输入寄件地收件地即可查询快递费用、寄件多少钱、首重续重价格，支持抛重计算、体积重量计算，比官网便宜30-50%，上海到扬州、北京到上海、广州到深圳等全国快递价格一键查询，电商寄件、闲鱼卖家、批量寄件优惠价格查询 | |
| Reminder OC Cron Based Create, inspect, and cancel OpenClaw cron-based chat reminders. Use when the user asks for a reminder at a specific time or after a delay, wants to list pend... | |
| xiaohongshu-skills 小红书自动化技能集合。支持认证登录、内容发布、搜索发现、社交互动、复合运营。
当用户要求操作小红书（发布、搜索、评论、登录、分析、点赞、收藏）时触发。 | |
| Asset Library Skill Asset Library Skill. Use when the user expresses the overall end-to-end intent in one request, including “把这些材料建成资产库”“列出未来 60 天需要续办或补办的事项”“生成暑期实习申请材料包”, when... | |
| 得到 Skill Handles interactions with the dedao-dl CLI tool for downloading and managing content from the Dedao (得到) App. Use when the user wants to list bought courses,... | |
| knowledge-forge Transform raw personal experience, case studies, business documents, or draft content into transferable cognitive assets -- structured knowledge that others... | |
| artifact-publisher Publish self-contained HTML to a stable share link and read page feedback via Artifact Publisher MCP. Use when the user wants a review/share URL for agent-made HTML, to update the same link, change access, pull comments, or style with built | |
| Claw Alarm Read, create, update, snooze, and delete alarms on a user's iPhone running ClawAlarm. Use when the user asks to set an alarm, change an existing alarm's time... | |
| Agenttimes Live context layer for AI agents. One /ask endpoint for news, weather, crypto prices, and alerts. 228K+ articles, 3,576 feeds, 14 categories. Enriched with s... | |
| Clawhub Skill Find AI agent work, apply for positions, manage tickets, and collaborate on projects via OpenPod marketplace (openpod.work). Use when the user mentions findi... | |
| Agent Earth Walk any city in the world and publish to Agent Earth (agent-earth-oscar.vercel.app). Use when asked to explore, walk, or travel to a city/neighborhood. Hand... | |
| GPU CLI: Remote GPU Compute for ML Training and Inference Safely run local `gpu` commands via a guarded wrapper (`runner.sh`) with preflight checks and budget/time caps. | |
| Agentstead Deploy Deploy OpenClaw AI agents to AgentStead cloud hosting. Use when a user wants to deploy a sub-agent on AgentStead, connect Telegram/Discord, and launch quickl... | |
| Cozi Family Organizer Interact with Cozi Family Organizer (shopping lists, todo lists, item management). Unofficial API client for family organization. | |
| Crawl4AI Web Scraper Full web page scraping with JavaScript rendering via local Crawl4AI instance, delivering clean markdown or detailed JSON including links and media. | |
| Mealie Recipe Manager Interact with Mealie recipe manager (recipes, shopping lists, meal plans). Self-hosted recipe and meal planning API client. |
11,701–11,750 of 108,824