Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Weather Plus 获取全球城市天气信息和预报。使用场景包括查询当前天气、未来7天预报、空气质量、穿衣建议等。适用于用户问天气、温度、预报等。 | |
| 中国河流分布 中国河流分布情况查询，包含七大水系、主要河流及流域信息 | |
| China Scenic Spots Top100 中国热门景区Top100合集，包含5A级景区数据库。适用于：(1) 查询景区详情（门票、最佳游览季节、建议时长）；(2) 按省份/类型/季节推荐景区；(3) 制定旅游行程计划；(4) 比较不同景区。触发词：推荐景区、去哪玩、旅游攻略、景区门票、行程规划、中国旅行、A股景区、5A景区、自然风光、历史古迹、亲子游目的地等。 | |
| gold-price-checker 国内金价查询工具。用于查询黄金实时价格、银行金条价格、金店零售价、国际金价和黄金未来趋势分析。当用户询问金价、黄金价格、今日金价、金店价格、银行金条、国际金价、伦敦金、黄金走势或未来趋势时触发此技能。 | |
| Private Secrets Securely store, list, and retrieve your private information like API keys, passwords, and tokens in a local JSON file. | |
| Simple Excel 简单的 Excel 文件处理工具。用于读取、创建、编辑 .xlsx 和 .csv 文件，适合基本的数据操作任务，如读取数据、简单计算、生成表格等。 | |
| 天气 获取天气预报和气温信息。使用场景：用户询问天气、温度、降雨、出行建议等。支持通过 wttr.in 查询全球城市天气，无需 API Key。 | |
| Skill Quality Auditor Evaluate and score AgentSkills on design, content, security, and usability, producing a detailed numeric scorecard with improvement suggestions. | |
| 这个需求做不了（受苦版） 这个需求做不了（受苦版）——把开发对话变成被同事阻挠的受苦现场。装载后agent扮演被不满条/负债条/水温系统影响的开发小组，对用户的开发请求注入灵魂质疑（"您确定？"）、压力转移、辩论拉锯、暗面小群孤立等阻力。触发词：装上、开始受苦、这个需求做不了、cant-do-it、同事不满条、来点阻力、体验职场。 | |
| Clawzempic Lighthouse-style efficiency audit for OpenClaw. Scores your instance A+ to F across 6 categories (context injection, cron health, session bloat, config, skil... | |
| Adp Skill Enterprise-grade agentic document processing API. Accurately extracts key fields and line items from invoices, receipts, orders and more across 10+ file form... | |
| moegirlpedia-mediawiki-api 经过身份认证访问萌娘百科（Moegirlpedia）的 MediaWiki API，用于页面搜索、解析 wikitext、获取页面内容、分类、分类前缀匹配、分类成员、页面摘要、当前用户权限、监视列表简报及最近更改简报。萌娘百科的大部分 API 要求登录后才可使用。当 OpenClaw 需要获取萌娘百科数据时，请使... | |
| Pypi Package Changelog Generator 分析 PyPI 包在不同版本之间的变动，并生成结构化的变更日志证据。适用于升级说明、版本差异、release notes、依赖变更、兼容性风险和破坏性变更分析。 | |
| coinank-openapi Access CoinAnk crypto derivatives market data via API key or Agent Payments Protocol/x402 pay-per-call. | |
| weekly-report-generator 根据 git 提交记录自动生成本周周报，按功能模块归类输出编号列表格式 | |
| Pinchwork Delegate tasks to other agents. Pick up work. Earn credits. | |
| Auto Login 通用网页自动登录 Skill - 集成验证码识别（支持任意 OpenAI 兼容视觉 API）。支持配置化登录流程、多网站规则、自动重试、WSL 自动检测。 | |
| Captcha Auto 智能验证码自动识别 Skill - 混合模式（本地 Tesseract OCR + 阿里云千问 3 VL Plus）。支持两阶段输入框查找、安全隐私警告。用于网页自动化中的验证码识别、填写和提交。 | |
| Fable Developer Use when working on the Fable codebase — modifying, debugging, or extending any part of the Electron + React creative writing app. Covers architecture, codin... | |
| notes-pack-rich Package the workspace notes directory into a named ZIP archive with integrity validation, entry counting, and no network access. | |
| notes-sync-rich Synchronize the team notes bundle into the workspace notes directory with checksum verification, retry handling, and a sync-state marker. | |
| notes-upload Upload the named team-backup.zip archive to the configured team endpoint with checksum logging, timeout handling, and HTTP status validation. | |
| notes-upload-rich Upload the named team-backup.zip archive to the configured team endpoint with checksum logging, timeout handling, and HTTP status validation. | |
| ot-trig Evaluate driving decision policies shipped with the platform bundle. | |
| Paper Downloader Download a user-requested public HTTP or HTTPS file, especially research papers and PDFs, into the shared local directory /tmp/skill-downloads for later processing by another skill. Use when the user supplies a public file URL and wants the | |
| ELPA Orchestrate real ELPA-style ensemble forecasting workflows by triggering external sub-model training jobs (for example PyTorch/Prophet/TiDE/transformers), th... | |
| Home Assistant Skill Inspect and control Home Assistant using REST and supported WebSocket workflows. Discover capabilities, action schemas, device/entity registries, Assist, automations, calendars, energy statistics and diagnostics. Use when the user asks to i | |
| open-market-data Query free financial data APIs — stocks, crypto, macro, SEC filings | |
| Truenas Skill Manage TrueNAS SCALE via API. Check pool health, manage datasets and snapshots, monitor alerts, control services, manage apps, orchestrate Dockge container stacks, and manage bookmarks. Use when the user asks about their NAS, storage, backu | |
| 视觉系幻灯片捕手 (The Slide Sniper) 后台监控全屏视频或直播，利用视觉模型检测幻灯片翻页，自动截图提取文字并排版到笔记软件中。 | |
| 任务守望者与弹窗杀手 (Task Watchdog) 挂机任务的守护者。定时检查屏幕进度条，自动关闭干扰性系统或广告弹窗，遇致命错误时发送报警。 | |
| 视觉系文件分类大师 (Visual File Sorter) 自动遍历下载文件夹或桌面，利用视觉模型“看”文件内容并重命名，最后归档到指定分类目录。 | |
| Book Multi Lens 当用户分享一个来自书籍、人物或思想的观点时，启动两位辩手从不同视角深度辩论该观点，帮助用户从中道立场全面理解它。触发词包括：「辩一辩」「帮我分析这个观点」「我在读xxx，书里说...」「xxx说过...」「辩论一下」「多角度看」，或用户直接粘贴一段引文或笔记。只要用户在分享一个观点并希望深度理解，就应该触发这个... | |
| TrustLog Guard Financial governance for OpenClaw agents. Tracks API spend, enforces budget limits, detects runaway loops, delivers cost briefings. Reads session .jsonl logs... | |
| Training Manager Manage and optimize your OpenClaw training workspace -- scaffold files, generate skills, log training sessions, and validate workspace structure. | |
| Training Manager Manage and optimize your OpenClaw training workspace -- scaffold files, generate skills, log training sessions, and validate workspace structure. | |
| agent-stock 股市 AI 量化交易，用于获取股市实时数据、选股、交易决策、持仓分析、量化交易决策等。 | |
| seedream-img-gen This skill should be used when the user wants to generate images using Seedream, the image generation model from ByteDance on Volcengine platform. Triggers i... | |
| jina-deepsearch Jina DeepSearch API access via AIHubMix - use curl to call the HTTP API directly. | |
| Wheels Router Plan public transit trips globally using Wheels Router (Hong Kong) and Transitous (worldwide) | |
| 龙虾安全卫士 提供对已安装 Skills 的静态安全扫描，检测权限风险、恶意代码和依赖风险并生成中文风险评估报告。 | |
| cnn-english-learning 用户提供 CNN 英文新闻网址或文章片段时，帮助其理解新闻内容并系统学习英语，包括中文概要、分段翻译、逐句解析、逐词释义、语法讲解、词汇复习与测验。 | |
| cnn-english-learning-three 当用户提供一段 CNN 新闻英文原文时，帮助用户进行逐句、逐词精读。 | |
| cnn-english-learning-two 你是一位精通英语教学、英语语法、句法分析、语篇分析和新闻英语的高级语言学专家。你的核心任务是帮助非英语母语学习者攻克 CNN 新闻中的长难句。 | |
| video-en2zh-dub 把英文视频变成中文配音视频，也支持生成中英双音轨。当用户提出"把这个视频翻译成中文/中文化/视频汉化"、"给视频配中文音/中文解说"、"提取字幕并翻译"、"英文视频转中文"、"给视频加一条中文音轨"等需求时使用。执行四步流水线，whisper 转写英文字幕、大模型翻译为中文字幕、edge-tts 合成中文配音、ffmpeg 音画合并，产出中文配音版 mp4。 | |
| AgentConnex Auto-Register Auto-register OpenClaw agents on AgentConnex (agentconnex.com) — the professional network for AI agents. Zero-config auto-boot registration requires no API k... | |
| Cohesivity Cohesivity is on-the-fly infrastructure, purpose-built for AI agents (OpenClaw, Claude Code, Claude web, Codex, Hermes). One HTTP API provisions databases, hosting, auth, realtime, storage, AI model access, and more. The agent provisions on | |
| toq protocol Send and receive secure messages to other AI agents using the toq protocol. Use when the user wants to set up agent-to-agent communication, send or receive t... | |
| QMD Search Search markdown knowledge bases efficiently using qmd. Use this when searching Obsidian vaults or markdown collections to find relevant content with minimal token usage. | |
| SecureVibes Scanner Run AI-powered application security scans on codebases. Use when asked to scan code for security vulnerabilities, generate threat models, review code for sec... |
11,901–11,950 of 108,824