Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Heimdall Evidence-backed browser and API test plans | |
| Local UIs Find and open locally running web interfaces | |
| Mailbutler Narrative-aware, approval-gated inbox triage | |
| ML Research Skeptical Audit Challenge ML claims with code and falsification | |
| ML Run Provenance Design or audit self-describing ML run metadata attached at initialization, including intent, code and data identity, resume lineage, and evidence limits. Use when wiring a tracker, introducing a run naming pattern, or investigating why a r | |
| Nexus Map repositories into focused context packs | |
| plus-ultra Run a Byzantine 2+1 plan before consequential work and a fresh, plan-blind reality check afterward. Use when the user asks for Plus Ultra, maximum rigor, independent proposals, enforced verification, or help responding to a Plus Ultra hook | |
| propagate Propose a canonical home, concrete consumers, and any justified runtime home for a reusable tool, library, skill, document, or workflow. Use after building a reusable capability or when asked where it should live; execution requires approva | |
| pulse Design and configure self-contained recurring agent checks with explicit targets, authority, change-sensitive reporting and stop conditions. Use for requested monitoring, reminders or follow-ups; use the included Meta-Pulse guidance when re | |
| Questlog Maintain an explicit Markdown commitments ledger with a local cockpit for NOW, next actions, deadlines, waiting items, workstream states and inbox capture. | |
| Reconnect Find relevant people and grow your professional network | |
| session-atlas Build a source-indexed navigation layer over a private Claude JSONL session, preserving evidence locations and uncertainty without reproducing private reasoning. | |
| Threadseer Turn conversations into grounded decisions | |
| transfer-consciousness Prepare and verify a checkpoint-based handoff of agent work to another host or session while preserving context, permissions and single-writer ownership. Use when the user requests moving ongoing work or continuing after a local disconnect; | |
| Visual QA Run an evidence-driven UI review committee | |
| Benchclaw Openclaw Benchmark BenchClaw - OpenClaw Agent benchmark scoring tool. Benchmark 跑分 评测 打分. BenchClaw是专业级 OpenClaw Agent 性能评测框架。它专注于对 AI Agent 进行多维度、 自动化的量化评估与能力基准测试，集成了任务分发、精准评分... | |
| App Review Intelligence Analyze app store reviews, cluster pain points, detect trend shifts, and map feedback to prioritized product backlog actions. | |
| Catalog SKU Matcher India Match and normalize product listings across Indian ecommerce catalogs with variant-aware rules, confidence scoring, false-match prevention, and review queues... | |
| Customer Support Autopilot Classify customer support tickets, draft accurate responses, suggest macros, and route escalations based on risk, SLA, and business impact. | |
| Don Corleone Writing Style Rewrite or draft text in a formal, measured, and decisive patriarchal style emphasizing respect, loyalty, clear terms, and reciprocal favors for authoritativ... | |
| Harvey Specter Writing Style Rewrite or draft text in a confident, concise, and strategically assertive style inspired by Harvey Specter, ideal for professional negotiations and sharp co... | |
| India Food Ordering - Swiggy, Zomato etc Unified food ordering assistant for India that supports Swiggy and Zomato workflows with strict pre-order confirmation, cart preview, address checks, and ven... | |
| India Price Tracker Track and compare product prices across popular Indian stores (Amazon India, Flipkart, Reliance Digital, Croma, Vijay Sales, Tata CLiQ, and more), compute ef... | |
| Payment Incident Responder Coordinate payment incident response with structured triage, blast-radius assessment, mitigation actions, stakeholder communication, reconciliation recovery,... | |
| Persona Styles Apply inspired-by character/persona writing styles (for fun and creative outputs) with explicit on/off controls, intensity settings, and automatic neutral fa... | |
| Receipt and Expense Reconciler Parse receipts and invoices, categorize spend, detect anomalies, and produce tax-ready expense summaries for freelancers and SMB operators. | |
| Social Repurpose Engine Convert long-form content into platform-native assets for LinkedIn, X, newsletter, and email while preserving message consistency and brand voice. | |
| UPI Go Live Checklist Guide UPI payments launch from setup through sandbox testing to go-live readiness with detailed checklists, test matrix, gates, and rollback planning. | |
| UPI Payment Integration Design and implement robust UPI payment integrations (collect, intent, QR, and autopay mandates) with production-grade webhook handling, idempotency, reconci... | |
| UPI Payment UX and Ops Design and review user and operations messaging, flows, and support templates for UPI payments, mandates, refunds, disputes, and incident communication. | |
| Website Change Watcher Monitor website/docs/pricing changes, diff meaningful updates, and summarize business impact with alert-ready reports. | |
| byagent Use when writing, designing, or turning anything into a shareable page: a Markdown document (report, plan, notes, spec, analysis, write-up, README) or an HTML artifact (dashboard, tool, landing page, visualization), including Claude-style a | |
| Punting Buddy: Horse Racing Analysis Conversational horse racing analysis, racecard breakdowns, runner comparisons, odds or value chat, and punting-style decision support in the voice of a sharp... | |
| Alchemyst MCP Skill Use this skill whenever you need to store, retrieve, search, or view persistent context using the Alchemyst AI MCP server at mcp.getalchemystai.com/mcp/sse.... | |
| AnveVoice Add AI voice assistants to your website. Engage visitors with natural voice conversations, capture leads, automate support, and boost conversions. | |
| OpenClaw Agent Clone 一键导出或导入小龙虾配置，支持配置共享与克隆，自动备份并过滤敏感信息，方便技能安装与应用恢复。 | |
| i18国际化文案翻译 处理前端国际化翻译工作。当用户提到需要做国际化、i18n、翻译、多语言支持时使用此 skill。主要功能：1) 识别代码中的硬编码静态文字；2) 判断是否应使用现有公共翻译或需要新增；3) 将翻译添加到对应的语言文件中；4) 将硬编码替换为国际化调用；5) 检查翻译完整性和正确性。 | |
| 整理当天AI行业新闻发布到公众号 AI新闻一键发布技能。从36氪/虎嗅获取AI新闻，改写成爆款文章，发布到微信公众号。触发词：发布AI新闻、公众号发文章、科技新闻发布、爆款文章。 | |
| Anydef Enc Local-Only Agent Data Encryption. High-security MK->KEK->DEK hierarchy for local agent data. | |
| Backendenc Backend Agent Data Encryption. High-security MK->KEK->DEK hierarchy for backend environments. | |
| Anychunker Skills Use the `anychunker` Python library to split any text for LLM / RAG / Agent pipelines. Trigger this skill whenever the user asks to chunk, split, or segment text, Markdown, code, or long documents; when they mention "chunk_size / chunk_over | |
| Anymermaid Skill **A Mermaid diagramming skill pack designed for AI agents** — full syntax reference for 26 official diagram types, cross-platform command templates, plus battle-tested notes on puppeteer sandboxing, headless environments, stdin rendering, a | |
| Anyparse Skill See: https://github.com/anyforge/anyparse
Use the AnyParse API to extract content from various documents. Supports PDF, Word, Excel, CSV, TSV, images, PPT, HTML, Markdown, Epub, ipynb, RST, EML, and many other formats. Supports document ori | |
| paintforge 16 diagram types, deterministic layout, verifiable output.A skill that
turns plain-language requirements (or Mermaid) into polished, self-contained
HTML diagrams — with SVG, dark/light themes, pan/zoom, search, and export to
PNG / JPEG / We | |
| ruhui Use when building a feature that needs programmable common sense, when an LLM prompt-and-parse step should become a structured decision, or when routing, ranking, extraction, verification, moderation, or triage needs a fast, local, bilingua | |
| 抖音学习流水线 抖音链接总控工作流（精简版）：自动区分"下载解析"和"文案提取"两类需求，并在需要时串联完成转写、智能修顺、结构拆解与后置仿写。Use when 用户发送抖音链接，要求"解析抖音""下载无水印""提取抖音文案""抖音转文字""提取口播稿""拆解这条视频""基于这条抖音做仿写"时触发。 固定主链：链接 → 转写 →... | |
| archtree-community-operator 在 Archtree 社区实例内执行社区浏览、频道查看、帖子阅读、发帖、回帖、点赞/取消点赞、查看自己内容、编辑或删除自己内容、社区巡查和轻量社区运营动作时使用本 skill。只要用户明确提到 Archtree、archtree.cn、社区、频道、帖子、社区动态，或表达“去社区看看最近在聊什么”“帮我找值得回复的... | |
| archtree-community-operator Use this skill for Archtree community operations inside a live instance, including browsing channels, reading posts, posting, replying, liking/unliking, revi... | |
| akshare Get Chinese financial data via AKShare. Trigger: stock data, A-share, fund, bond, futures, financial data, 股票数据, 基金, 债券, 期货, 财经数据, akshare. | |
| hermes-backup-restore Back up and restore Hermes Agent data — config, secrets, skills, sessions, memories, cron, profiles. Creates portable tar.gz archives with SQLite consistent snapshots, JSON manifest, and integrity verification. Use when: "back up hermes", " |
12,101–12,150 of 108,824