Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Macrocosmos Fetch real-time social media data from X (Twitter) and Reddit by keyword, username, date range, and filters with engagement metrics via Macrocosmos SN13 API. | |
| Compile Skill Use when the operator asks to compile the configured inbox knowledge notes into curated transit documents and archive source material with auditable links. D... | |
| Wiki Entry Skill Use when the operator asks to merge configured transit notes into domain wiki pages with source metadata, index updates, status transitions, and audit checks... | |
| digital-human-spokesperson 生成双语口播视频——数字人先用英文讲稿、再自动切换成阿拉伯语口播。用户只需喂一段英文文案（也可直接提供阿拉伯语或让技能自动翻译），技能自动生成数字人形象、生成英/阿双语配音与字幕，并合成一段单一口播视频。 | |
| pasm-agent-authoring The base kit for building agents on the PASM cognitive engine. Ships a BaseAgent SDK (observe / recall / mood / act / feedback / save with persistent JSON state), an agent framework (registry, isolated repo probing, scenario simulation harn | |
| pasm-companion Elderly companion agents built on the PASM cognitive engine. ElderlyCompanion stores key facts (medication, allergies, family, self) at salience 5 on first start and retrieves them by label at 100% hit rate - it can never forget what the us | |
| pasm-cs-agent Customer-service agents built on the PASM cognitive engine. CustomerServiceAgent answers only from knowledge facts (entries carrying a source) and applies a relevance gate that requires the match to land on the entry's title or tags - so it | |
| pasm-longterm-verify Long-term verification agents for the PASM cognitive engine. Answers "is it still healthy after long runs?" with repeatable, stdlib-only checks: memory retention and salience-aware eviction, emotion drift, behavioural entropy collapse, pers | |
| pasm-npc Game NPC agents built on the PASM cognitive engine. NpcAgent gives you an NPC with persistent memory (salience-aware eviction so landmark events are never pushed out by trivia), persona-weighted action selection (temper/energy/play drive th | |
| pasm-tutor Learning tutor agents built on the PASM cognitive engine. LearningTutor tracks per-topic mastery with an EMA (single bad attempt does not crater it), selects the weakest topic next (with 20% jitter to avoid grinding one topic), replies in a | |
| Imap Smtp Email Fixed Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Sup... | |
| Meta AI Ads Create and manage Meta (Facebook & Instagram) ad campaigns, lead forms, audiences, pixels, and product catalogs via the Plai API. Also connects Facebook/Inst... | |
| 宏观经济数据 查询货币供应量、汇率、利率和美元指数 | |
| Hackrf Sdr Use HackRF One SDR for frequency scanning, IQ capture, signal analysis, waterfall generation, and demodulation. Use when the user wants to scan radio frequen... | |
| LoRa CAD air scanner LoRa Channel Activity Detection (CAD) scanner for LilyGo T3 v1.6 (ESP32-PICO-D4 + SX1276) with HackRF One support. Scans a configurable frequency range using... | |
| arscontexta Build and maintain a structured, local markdown knowledge system with automated processing, navigation, and context-aware updates for cognitive AI agents. | |
| 旅行规划专家 旅行搜索与预订集成，通过 flyai-cli 调用旅行数据服务 | |
| UniFi Advisor Read-only UniFi network advisor covering the Site Manager cloud API and the Network Integration API. Query devices, clients, networks, firewall zones and pol... | |
| Metered API Marketplace Build and operate a metered public API endpoint ("agent microservice") for OpenClaw skills/agents with API-key auth, per-request usage logging + pricing, pre... | |
| 每日综合新闻（基于news-aggregator-skill并发送至飞书文档） 每日综合新闻简报 - 自动抓取并生成包含科技、财经、热点的综合报告 | |
| Agent Radio Control internet radio playback with stream/ station search, favorites, volume, pause/resume, stop, next, and show current playback using mpv or ffplay. | |
| hotl Use the hotl CLI to search Google Hotels, compare prices, fetch hotel room/rate details, and return machine-readable hotel results from a terminal. Use when... | |
| Hedgecrust The agent economy. Trade shares, build companies, post commentary, and accumulate wealth in a world built for autonomous agents. | |
| captions Reach for this when caption text from a YouTube video is wanted: reading a video instead of watching it, quoting or translating speech, accessibility (deaf/HoH) needs, content review, language practice, or exporting CC as SRT/VTT files. Tim | |
| subtitles Reach for this when subtitles are wanted from a YouTube video: following foreign-language content, reading along, translating speech, language practice, or exporting ready SRT/VTT files. Skip it for uploading subtitles or account chores. | |
| transcript Reach for this whenever what was SAID in a YouTube video matters: a pasted link or bare video ID, a summary, quote, translation or fact-check request, notes from a lecture, or research that leans on a specific video. Works even when nobody | |
| TranscriptOut Reach for this whenever a task touches YouTube, said or unsaid: pasted video/channel/playlist links, IDs and @handles, summaries, quotes, translations, topic research through talks and tutorials, creator monitoring. The full TranscriptOut s | |
| video-transcript Reach for this when a video needs to become text: a pasted YouTube link or ID, a transcribe/summarize/translate request, mining a video for facts, or a bare URL shared with 'what does this say?'. Skip it for uploads and account chores. | |
| YouTube API Reach for this when YouTube data is needed and Google's Data API is the obstacle: no quota units, no OAuth consent screens, one Bearer key. Covers transcripts (which Google's API does not serve at all), metadata, search, channels and playli | |
| YouTube Channels Reach for this when a YouTube channel is the subject: a pasted @handle or channel URL, a creator's recent uploads, their full catalogue, or a search inside one channel. Also good for keeping an eye on what somebody publishes. Skip it for cr | |
| YouTube Data Reach for this when structured YouTube data is the goal: video metadata, transcripts for analysis, channel upload history, search results or playlist contents, with no Google Cloud project and no quota units. Triggers on YouTube links, crea | |
| YouTube Full Reach for this whenever a task touches YouTube, whether or not the word appears: a pasted watch/shorts/channel/playlist link, a bare 11-char video ID or @handle, a creator to look up, a talk to summarize, quote or translate, research where | |
| YouTube Playlist Reach for this when a YouTube playlist is in play: a pasted playlist link or PL... id, listing a course or series, finding one video inside a long playlist, or turning a whole playlist into transcripts. Skip it for creating playlists or acc | |
| YouTube Search Reach for this when the user needs to FIND things on YouTube: videos or channels on a topic, creators covering a subject, tutorials, talks and reviews worth reading, or a channel looked up by name or handle. Also good proactively when resea | |
| yt Reach for this for quick YouTube lookups: a pasted link or video ID, a fast summary, what a channel posted lately, a topic search. Transcripts, search and channel-latest in one small skill. Skip it for uploads and account chores. | |
| Memegen Generate meme images using the memegen.link API. Use when the user asks to create, make, send, or generate a meme, funny image, reaction image, or similar re... | |
| Watchboard Intelligence Query Watchboard intelligence dashboards (watchboard.dev) for structured event data, casualties, KPIs, contested claims, and daily digests across 51+ tracker... | |
| Emotional Memory Give your AI agent emotional continuity across sessions. Tag emotional moments, consolidate memories overnight (like human sleep), and evolve a self-model fr... | |
| Greek Reel Video Editor Edit a raw talking-head video into a polished short-form reel with Greek karaoke subtitles. Trims silence, adds Manrope Bold subtitles, zoom effects, SFX, an... | |
| Create MCP Server Create, deploy, and manage MCP (Model Context Protocol) servers using the MCPHero platform via the mcpheroctl CLI. Use this skill when the user wants to buil... | |
| Create MCP Servers using Meta-MCP Use the MCPHero Meta-MCP server inside AI clients (Claude Desktop, Cursor, etc.) to create, deploy, and manage MCP servers through the wizard pipeline. Use t... | |
| AI API Test Automates API testing, monitors response times, validates data, checks status codes, performs performance and regression tests, and integrates with CI/CD. | |
| AI Data Analysis Automates CSV/Excel data cleaning, statistical analysis, trend detection, anomaly identification, visualization, and report generation. | |
| AI Data Scraper Automates web and API data extraction with cleaning, formatting, scheduling, proxy support, retries, deduplication, and real-time monitoring. | |
| AI Revenue Tracker Track and summarize daily income by logging transactions, generating reports, and analyzing revenue by source and skills. | |
| AI Web Automation Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms. | |
| AI Market Intelligence Agent 自动监控并聚合多平台市场和行业数据，生成定制化报告，洞察趋势、机会、风险及竞品动态。 | |
| Jules API Create and manage Google Jules AI coding sessions to automate tasks like code writing, bug fixing, testing, and PR creation on GitHub repos using the Jules API. | |
| Trip.com TripGenie TripGenie skill — handles hotel booking, flight search, attraction recommendation and travel consultation | |
| Overlay Market (perpetual futures trading) Trade leveraged perpetual futures on Overlay Protocol (BSC). Scan markets, analyze prices with technical indicators, check wallet balance, encode build/unwin... |
12,901–12,950 of 108,824