Beacon Threat Intelligence
Security intelligence for the agent supply chain
Every MCP server and agent skill the public registries list, matched to its source repository, with Beacon's verdict on what it can do to your agent and your machine.
| Name | Risk |
|---|---|
| rust-call-graph actionbook/rust-skills | |
| rust-code-navigator actionbook/rust-skills | |
| rust-daily actionbook/rust-skills | |
| rust-deps-visualizer actionbook/rust-skills | |
| rust-learner actionbook/rust-skills | |
| rust-refactor-helper actionbook/rust-skills | |
| rust-router actionbook/rust-skills | |
| rust-skill-creator actionbook/rust-skills | |
| rust-symbol-analyzer actionbook/rust-skills | |
| rust-trait-explorer actionbook/rust-skills | |
| unsafe-checker actionbook/rust-skills | |
| postmark activecampaign/postmark-skills | |
| agent-browser activepieces/activepieces Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Tri | |
| debug-failed-run activepieces/activepieces Debug a failed Activepieces flow run end-to-end: given a flow run id (or BullMQ job id), find why it failed, cross-referencing the live BullMQ job + Postgres rows (SSH script on the DevOps box), the centralized ClickHouse logs (ClickStack M | |
| playwright-e2e-testing activepieces/activepieces Playwright modern end-to-end testing framework with cross-browser automation, auto-wait, and built-in test runner | |
| triage-security-advisories activepieces/activepieces Triage the GitHub privately-reported vulnerability backlog for Activepieces — pull repository security advisories from the Security tab, scope-check against SECURITY.md, deeply validate each, compute SLA status, and propose fix plans for re | |
| review-actual-pr actualbudget/actual Comprehensive review of a pull request in the actualbudget/actual repo. Performs an offline code review against the repo's CODE_REVIEW_GUIDELINES.md and AGENTS.md (no GitHub comments are ever posted), then browser-tests the change with play | |
| esp32-firmware-engineer adamlipecz/esp32-firmware-engineer-skill | |
| aso-appstore-screenshots adamlyttleapps/claude-skill-aso-appstore-screenshots | |
| slide-maker addsumtech/slides_maker | |
| api-and-interface-design addyosmani/agent-skills | |
| ci-cd-and-automation addyosmani/agent-skills | |
| code-review-and-quality addyosmani/agent-skills | |
| code-simplification addyosmani/agent-skills | |
| constraint-driven-development addyosmani/agent-skills | |
| context-engineering addyosmani/agent-skills | |
| debugging-and-error-recovery addyosmani/agent-skills | |
| documentation-and-adrs addyosmani/agent-skills | |
| frontend-ui-engineering addyosmani/agent-skills | |
| git-workflow-and-versioning addyosmani/agent-skills | |
| idea-refine addyosmani/agent-skills | |
| incremental-implementation addyosmani/agent-skills | |
| interview-me addyosmani/agent-skills | |
| observability-and-instrumentation addyosmani/agent-skills | |
| planning-and-task-breakdown addyosmani/agent-skills | |
| shipping-and-launch addyosmani/agent-skills | |
| source-driven-development addyosmani/agent-skills | |
| spec-driven-development addyosmani/agent-skills | |
| test-driven-development addyosmani/agent-skills | |
| using-agent-skills addyosmani/agent-skills | |
| clarity addyosmani/clarity | |
| accessibility addyosmani/web-quality-skills | |
| best-practices addyosmani/web-quality-skills | |
| core-web-vitals addyosmani/web-quality-skills | |
| performance addyosmani/web-quality-skills | |
| seo addyosmani/web-quality-skills | |
| web-quality-audit addyosmani/web-quality-skills | |
| hive-browser-automation aden-hive/hive Required before any hive-browser CLI command. The browser is driven from the terminal by running `hive-browser <command> ... --json` via terminal_exec — not via MCP tools. Teaches the browser lifecycle rules (the bridge attaches to the USER | |
| browser-edge-cases aden-hive/hive SOP for debugging browser automation failures on complex websites. Use when browser tools fail on specific sites like LinkedIn, Twitter/X, SPAs, or sites with Shadow DOM. | |
| hive-linkedin-automation aden-hive/hive Read before automating LinkedIn with browser_* tools. LinkedIn combines shadow DOM (#interop-outlet), strict Trusted Types CSP that silently drops innerHTML, Lexical composer, native beforeunload dialogs that hang the bridge, and aggressive |
1,151–1,200 of 107,491