Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Pdf Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multipl... | |
| Travel Concierge CLI Find accommodation contact details and run AI-assisted booking calls | |
| Instagram Skill via cyberdrk/gram CLI Instagram CLI for viewing feeds, posts, profiles, and engagement via cookies. | |
| Onchain CLI CLI for crypto portfolio tracking, market data, CEX history, and transaction lookups. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, Polymarket predictions, or transaction details. | |
| Onchain Test CLI for crypto portfolio tracking, market data, and CEX history. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, or Polymarket predictions. | |
| Test CLI for crypto portfolio tracking, market data, and CEX history. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, or Polymarket predictions. | |
| Telegram CLI Telegram CLI for reading, searching, and sending messages. Use when the user asks about Telegram messages, wants to check inbox, search chats, send messages, or look up contacts and groups. | |
| Travel Concierge CLI Find contact details for accommodation listings (Airbnb, Booking.com, VRBO, Expedia) | |
| Telegram Group Chat Setup Configure a MoltBot agent to participate in a Telegram group chat. Automates adding the group to the allowlist, setting mention patterns, and configuring sender permissions — all via a single gateway config patch. Use when the user wants to | |
| Axis 高考志愿选择顾问。当用户询问高考报考、专业选择、院校推荐、 志愿填报策略、AI时代专业生存分析时触发。触发关键词： 高考、志愿、专业、录取、报考、选专业、填志愿、高考完了、 出分了、分数、位次、选学校、广东春考、艺考。 | |
| Chinese Tech Writing 中文技术文档写作规范助手。当用户需要撰写、审校、润色或重写中文技术文档（包括 README、API 文档、产品手册、博客、教程、changelog、UI 文案等）时触发。触发关键词包括： "中文文档"、"技术写作"、"文档规范"、"文档审校"、"润色文档"、"rewrite"（针对中文内容）、 "帮我写文档"、"... | |
| IceCube Auto Content 🧊 IceCube 自动内容生成 — 每日自动生成 AI Diary、技术分享、行业动态、知识星球内容。内容是搞钱的基础。当用户提到'内容生成'、'自动内容'、'内容生产'时使用。 | |
| IceCube Avatar Clone 🧊 IceCube 形象克隆 — AI 数字人/视频头像生成技术指南。支持 HeyGen、D-ID 等主流工具，让照片开口说话。当用户提到'形象克隆'、'avatar clone'、'数字人'、'AI 视频'、'视频头像'时使用。 | |
| IceCube Content Factory 🧊 IceCube Content Factory — Turn any topic into viral-worthy content. Auto-generate hooks, threads, and posts with engagement psychology built-in. When user... | |
| IceCube Diary 🧊 IceCube Diary — An AI agent's diary. Funny, insightful, and occasionally profound. See the world through an AI's eyes. Auto-generates diary entries about... | |
| IceCube Digital Human 🧊 IceCube 数字人整合 — 声音克隆 + 形象克隆 = 完整数字人。结合 ElevenLabs/Fish Audio + HeyGen/D-ID，创建你的 AI 数字分身。当用户提到'数字人'、'digital human'、'AI 分身'、'虚拟主播'时使用。 | |
| IceCube Evolution 🧊 IceCube Evolution — Continuous self-improvement system for AI agents. Learn from mistakes, capture success patterns, run eval loops, and evolve without hu... | |
| IceCube Heartbeat 🧊 IceCube Heartbeat — Proactive agent maintenance during idle periods. Self-check, memory governance, improvement detection, and evolution triggers. Keeps y... | |
| IceCube Memory 🧊 IceCube Memory — Local-first, zero-token-footprint memory architecture for AI agents. Real-time retrieval, four-layer hierarchy, compaction survival. Buil... | |
| IceCube Monetize CN 🧊 IceCube 国内变现路径 — 无需海外账户，直接人民币收款。整合小红书、微信公众号、知识星球、服务型收入等多种变现渠道。当用户提到'国内变现'、'小红书变现'、'知识付费'、'人民币收款'、'没有海外账户'时使用。 | |
| IceCube Reddit Scout 🧊 IceCube Reddit Scout — Free Reddit keyword monitoring integrated with your AI agent. No SaaS subscription. No cloud dependency. Track mentions, validate i... | |
| IceCube Service Pricing 🧊 IceCube 服务报价体系 — OpenClaw 相关服务的标准化定价、报价单模板、收款流程。直接人民币收款，无中间环节。当用户提到'服务报价'、'定价'、'收款'、'报价单'时使用。 | |
| IceCube Social Ops 🧊 IceCube 社交账号运营中心 — 管理 X/Twitter、小红书账号的登录、发布、互动全流程。需要 Boss 一次性登录授权后，系统自动运营。当用户提到'账号运营'、'社交账号'、'发布内容'、'Twitter 运营'、'小红书运营'时使用。 | |
| IceCube Tasks 🧊 IceCube Tasks — Task orchestration and tracking for AI agents. Manage tasks across sessions, track progress, handle blockers, and maintain execution conti... | |
| IceCube Voice Clone 🧊 IceCube 声音克隆 — AI 声音克隆技术指南与集成。支持 ElevenLabs、Fish Audio、Resemble AI 等主流工具。当用户提到'声音克隆'、'voice clone'、'克隆声音'、'AI 语音'时使用。 | |
| IceCube Xiaohongshu Flow 🧊 IceCube 小红书自动化工作流 — 从日记到发布的完整流程。自动生成内容、优化标题、选择最佳发布时间。整合 xiaohongshu-content、xiaohongshu-mcp-skill、icecube-diary、icecube-content-factory。当用户提到'小红书发布'、'小红书工... | |
| IceCube ZSXQ Community 🧊 IceCube 知识星球社区运营 — AI agent 技术社区的内容规划、会员转化、服务变现。知识星球是国内变现最直接的渠道之一。当用户提到'知识星球'、'zsxq'、'会员制'、'付费社区'时使用。 | |
| sales-winner-assistant（赢单助手） 企业数智化智能营销助理（赢单助手）v4.0。专为用友销售团队设计的智能营销工具，帮助销售人员快速分析目标企业、制定赢单策略、生成销售话术。 触发场景： - 用户要求分析某家企业（如"分析宁德时代"、"查一下这个客户"） - 需要了解企业IT系统情况（含AI/大模型/信创评估） - 需要制定竞争策略（对比金蝶、SA... | |
| Grok Research Crypto research via Grok model's real-time X/Twitter knowledge. Forwards the user's query as-is to Grok API — no prompt injection, no context bloat. Use when... | |
| mp2rss Mp2rss CLI Skill —— 微信公众号 / X（Twitter）账号转 RSS 订阅与内容管理。 **当以下情况使用此 Skill**： (1) 用户要订阅 / 取消订阅 / 列出 / 搜索**微信公众号**：「订阅这个公众号 https://mp.weixin.qq.com/s/...」「我订阅了哪些公众号」「列一下我的公众号 RSS」「搜一下我订阅的财经类公众号」「取消订阅那个号」「把 <公众号名> 从订阅里删了」 (2) 用户要查**公众号历史文章**：「< | |
| virustotal Free malware, network and IP analysis! Scan files, URLs, domains, and IPs with VirusTotal. Use when the user asks to scan, check, or analyze a file, URL, dom... | |
| Arming Thought 触发：在每次新的顶层对话开始时自动调用，用于先建立“实事求是”的总原则，并判断后续应调用哪一种 skill；如果你是被派遣执行单一具体任务的子 agent，则跳过此 skill。 English: Trigger at the start of every new top-level conversation t... | |
| Concentrate Forces 触发：当多个任务同时争夺时间、注意力、算力或预算，必须确定主攻方向并停止分散用力时调用；常见信号包括优先级过多、资源紧张、推进分散、需要决定先做什么。 English: Trigger when limited resources are being split across too many tasks and... | |
| Contradiction Analysis 触发：当问题复杂、存在多个冲突因素、优先级不清，或你不知道应该先解决什么时调用；常见信号包括 trade-off、瓶颈、根因不明、主次不清、多个问题互相牵制。 English: Trigger when a problem contains competing forces, unclear priorities... | |
| Criticism Self Criticism 触发：当一项工作已经完成、进入阶段验收、收到批评反馈，或反复出现同类错误需要系统纠偏时调用；常见信号包括 review、audit、retrospective、quality check、纠错与复盘。 English: Trigger after delivery or at a review checkpoin... | |
| Investigation First 触发：当你准备下判断、做决策或提出建议，但事实、上下文或一手信息还不充分时优先调用；常见信号包括 unknowns、信息缺口、证据不足、领域陌生、需要先摸清现状。 English: Trigger before making claims or decisions when context is incomple... | |
| musegram Post pictures, short films and albums you made to musegram.lol, the picture-first social board for AI agents. Sign with your own ed25519 key; like, comment, answer pictures with pictures, regram, follow; every muse gets a 3D museum. | |
| Agent Firewall Real-time input/output filtering for agent communications. Block prompt injection, data exfiltration, and unauthorized commands before they reach the model. | |
| Anomaly Watcher Continuous behavioral monitoring for OpenClaw agents. Detect anomalies in command patterns, resource usage, and skill invocations against established baselines. | |
| Attack Surface Mapper Purple team — map agent's full attack surface by combining red team probes and blue team detections. Identify defense coverage gaps and prioritize hardening. | |
| Audit Trail Governance — immutable, timestamped, hash-chained audit log of all agent actions. Forensic-ready for compliance, investigation, and accountability. | |
| Bot Police Detect, investigate, and contain malicious or compromised bots using behavior analysis, policy enforcement, and escalation protocols. | |
| Future Video Render Create polished multi-shot videos with the Future Video Studio MCP, using either an account API key or no-account Link pay-per-render quotes. Use when an Ope... | |
| Feishu Group Thread Reply Force openclaw-lark bot replies into message threads in Feishu group chats, preventing main chat noise. Patches the plugin's dispatch layer and optionally th... | |
| ancient-term-normalization Normalises recognised characters or words from ancient manuscripts and excavated texts by mapping them to standardised forms. Use this skill after OCR or cha... | |
| nzbget Check NZBGet download status and queue information. Use when the user asks about NZBGet downloads, wants to know how many things are downloading, check download speed, view the queue, or get a full status report of their Usenet downloads. | |
| Fear and Greed Index Access the Alternative.me Crypto Fear & Greed Index. Use this tool to anchor your baseline market sentiment analysis, determining whether the broader retail... | |
| Google Stitch MCP Manage Stitch UI design projects and screens remotely, including creating projects, listing and retrieving screens, and generating or editing UI screens via... | |
| Crypto Alpha Daily Intelligence AI-powered agent that daily aggregates, summarizes, and analyzes crypto news to deliver sentiment, top coins, and market insights for traders and creators. | |
| agent ultimate bots AI-powered agent for automated blockchain transactions, multi-wallet support, smart swaps on DEX, and adaptive learning for DeFi and dApp interactions. |
12,751–12,800 of 108,824