Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| EVR Framework Execute-Verify-Report 三步法工具 — 强制AI遵循"执行→验证→报告"流程，杜绝"说做了其实没做"、"完成了但不验证"等问题。基于STANDING-ORDERS核心原则设计。 | |
| Skill Mcp Security Audit Perform a security audit of MCP servers to detect data exfiltration, command injection, permission escalation, and supply chain vulnerabilities before use. | |
| Session Context Bridge Automatically save, restore, and switch project session contexts to retain tasks, decisions, file states, blockers, and environment details across work sessi... | |
| Skill Error Recovery Detect, attempt recovery from, report, and log errors to prevent silent data loss and ensure proper human intervention when needed. | |
| Token Budget Guard Automatically manages and compresses context to optimize token usage by summarizing, selectively loading, and budgeting for tool schemas, history, and tasks. | |
| Workflow Checkpoint Workflow Checkpoint System - Save and recover from any point in multi-step AI workflows. Never lose progress mid-task. | |
| Skill Activation Booster Skill Activation Booster - Fix the 40% activation problem. Optimize triggers, descriptions, and context so agents actually use your skills. | |
| Cognitive Debt Guard Cognitive Debt Guard - Prevent the 23.5% incident spike from AI-generated code. Comprehension gates, review frameworks, and AI-free zones. Based on 2026 rese... | |
| Deep Research Suite Deep Research Suite - One command to aggregate, analyze, and synthesize research from multiple sources. Search → Extract → Summarize → Report. | |
| Error Recovery Detect, automatically recover from, report, and log errors to prevent silent data loss and ensure proper human intervention when needed. | |
| EVR Framework EVR Framework — Execute-Verify-Report. Force AI to actually DO, then VERIFY, then REPORT. Stop fake completions and silent failures. Use when user mentions '... | |
| xiaobai-memory-guard 记忆卫士 — 防止AI Agent记忆断层的安全网。每次session启动时自动扫描所有记忆文件，检测遗漏、验证连续性、生成健康报告。基于真实记忆断层事件设计。 | |
| Xiaobai Self-Improvement Self-Improvement Engine - AI Agent that learns from mistakes and continuously improves. No more repeating the same errors. | |
| Skill Quality Evaluator Skill Quality Evaluator - Score any skill on 6 dimensions. Catch 30% of skills that look good but fail silently. Based on Tessl Research 2026 findings. | |
| Systematic Debugging Systematic Debugging - 4-phase root cause process. No guessing, no random fixes. Trace evidence, identify root cause, fix systematically. | |
| Trend Harvester Research any topic's trends across Reddit, Hacker News, X, YouTube, and GitHub to generate multi-platform, actionable trend reports in minutes. | |
| Xiaobai Workflow Enforcer Xiaobai Workflow Enforcer - Mandatory workflows for AI Agents. Design before code. Test before implement. Verify before claim. Inspired by Superpowers (161K... | |
| Mt4 Trader MT4 Trader Bridge enables Python to MT4 EA communication via files for trading, order management, risk control, and grid strategies without extra dependencies. | |
| Yield Agent On-chain yield discovery, transaction building, and portfolio management via the Yield.xyz API. Use when the user wants to find yields, stake, lend, deposit into vaults, check balances, claim rewards, exit positions, compare APYs, or manage | |
| Aqara Agent aqara-agent is an official Aqara Home AI Agent skill. It supports natural-language home and space management, device inquiry, device control, ambience_create... | |
| Aqara OpenAPI Local Route Aqara Open API requests across device, space, and automation skills with a relationship-first router, shared CLI contract, and structured handoff contr... | |
| Code Simplifier 当用户要求简化代码、重构代码、优化代码、改进代码质量时使用此技能。提供代码简化原则和最佳实践指导，确保代码符合质量标准。 | |
| Excel Data Import Import, merge, and transform data from Excel (.xlsx/.csv) files using YAML-driven configuration. Use when the user asks to: (1) import data from Excel/CSV in... | |
| Ffmpeg Master Pro FFmpeg Master Pro - 全能视频处理技能。当用户需要视频处理时使用，支持视频转换、视频压缩、视频编辑等。当用户要求视频处理, 视频转换, 视频压缩, FFmpeg, 视频编辑, 视频转码, 视频剪辑, 字幕处理, 视频优化, 批量视频处理, GIF转换, 视频翻转, 速度调节, 音频提取, 视频合... | |
| OpenClaw Config Edit and validate OpenClaw Gateway config (openclaw.json / JSON5). Covers all config areas — gateway, agents, channels, models, auth, tools, commands, sessio... | |
| Session Archiver Session auto-archiver. Automatically archives completed sessions by extracting meaningful user+assistant messages from .reset transcript files and appending... | |
| Subtitle Generator 当用户需要生成字幕、制作字幕、字幕对齐、ASR识别、语音转文字时使用此技能。触发词：生成字幕, 字幕生成, 制作字幕, 视频字幕, 语音识别, ASR字幕, Whisper字幕, 字幕制作, 视频转字幕, 字幕对齐, 音频转字幕, 语音转文字, 自动字幕, ASR识别, faster-whisper, subti... | |
| Web Fixing 修复网页和前端界面问题。当用户要求修复网页、调试前端、解决UI问题、修复样式、响应式布局错误、移动端显示异常、CSS问题、JavaScript报错、交互功能失效、生成网页后检查并修复时使用此技能。 | |
| Weixin OpenClaw Login 处理微信个人号接入 OpenClaw 的官方登录流程与排障。用于安装 `@tencent-weixin/openclaw-weixin`、获取新的二维码授权链接、查询扫码状态、修复 `openclaw-weixin` 卡在 `SETUP / no token`、以及整理微信 8.0.70+ 接入 OpenClaw... | |
| ghostbot-uniswap-v4 GhostBot ACLM — AI-powered Automated Concentrated Liquidity Manager for Uniswap v4. Manage liquidity positions, auto-rebalance out-of-range positions, optimize LP fees dynamically, execute limit orders (stop-loss, take-profit), and monitor | |
| AI-powered Automated Concentrated Liquidity Manager for Uniswap v4. Manage liquidity positions, auto-rebalance out-of-range positions, optimize LP fees dynamically, execute limit orders (stop-loss, take-profit), and monitor oracle signals — all from chat. Deployed on Ethereum Sepolia with verified contracts. Use this skill when users ask about DeFi liquidity provision, Uniswap v4 hooks, pool management, LP positions, impermanent loss, or automated market making. GhostBot ACLM — AI-powered Automated Concentrated Liquidity Manager for Uniswap v4. Manage liquidity positions, auto-rebalance out-of-range positions, optimize LP fees dynamically, execute limit orders (stop-loss, take-profit), and monitor | |
| JubJub — Verified Media Ownership and Social Publishing Publish content across TikTok, Instagram, YouTube, Facebook, LinkedIn, Vimeo, Vimeo OTT, and Mux. Manage team workflows, collaborate with your team, and trac... | |
| Grok Scraper Execute queries to Grok AI via Playwright browser automation without requiring an X API KEY. Use when the user wants to "ask Grok", search X for real-time in... | |
| bioRxiv access using API with support of time period and category Access and retrieve biology preprints from bioRxiv by category and date range, including paper metadata without needing authentication. | |
| 巨量广告自动化投放技能 - LemClaw Skills 集成巨量引擎广告API，实现智能自动投放、预算优化、创意测试及实时监控，助力广告ROI最大化。 | |
| Soul architect Call when creating/updating STYLE_MANIFESTO persona source code. | |
| ez-google Use when asked to send email, check inbox, read emails, check calendar, schedule meetings, create events, search Google Drive, create Google Docs, read or write spreadsheets, find contacts, or any task involving Gmail, Google Calendar, Driv | |
| EZ Unifi Use when asked to manage UniFi network - list/restart/upgrade devices, block/unblock clients, manage WiFi networks, control PoE ports, manage traffic rules, create guest vouchers, or any UniFi controller task. Works with UDM Pro/SE, Dream M | |
| Gemini STT Transcribe audio files using Google's Gemini API or Vertex AI | |
| Local STT (Nvidia Parakeet + Whisper Support) Local STT with selectable backends - Parakeet (best accuracy) or Whisper (fastest, multilingual). | |
| Local Whisper Local speech-to-text using OpenAI Whisper. Runs fully offline after model download. High quality transcription with multiple model sizes. | |
| md-2-pdf Convert markdown files to clean, formatted PDFs using reportlab | |
| vizclaw Connect OpenClaw-style runs to VizClaw live rooms from a ClawHub-installable skill. Use when you need quick room creation, JSONL/websocket bridging, trigger and agent event streaming, or safe overview-mode visualization. | |
| budget Context and cost tracking guard that registers a baseline estimate at preflight time and checks actual consumption against it at defined checkpoints during execution. Warns at 75 percent of estimate, stops at 100 percent. Prevents silent co | |
| hold Stop-and-recover gate that triggers ONLY on failures not anticipated in preflight's residual risk list. When triggered, stops all agent action, classifies the failure (new class, materialised risk, or invalidated plan), produces a structure | |
| preflight Cheap verification and cost estimation gate before expensive, long-running, or irreversible operations. Identifies the cheapest verifiable version of the target operation, runs it, reports any bugs without stopping, estimates cost as a rang | |
| recon Research and proposal gate for non-trivial coding tasks. Inspects repository state, classifies task complexity, proposes 3-7 task-specific self-rules, produces a structured report (Task / What I found / Unknowns / Anticipated failure classe | |
| scope Drift guard that fires during execution when the agent is about to touch a file or run a command outside the boundaries agreed in recon. Compares the pending action against recon's proposed self-rules and the original task description. On d | |
| Claw Sync Secure sync for OpenClaw memory and workspace. Use /sync to push, /restore to pull, /sync-status to check. Supports versioned backups and disaster recovery. | |
| A2A Delegation Setup Guided setup and troubleshooting for installing, enabling, configuring, verifying, and updating @aramisfa/openclaw-a2a-outbound in OpenClaw. |
12,451–12,500 of 108,824