Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Openssl Generate secure random strings, passwords, and cryptographic tokens using OpenSSL. Use when creating passwords, API keys, secrets, or any secure random data. | |
| Units Perform unit conversions and calculations using GNU Units. | |
| Wrangler Manage Cloudflare Workers, KV, D1, R2, and secrets using the Wrangler CLI. Use when deploying workers, managing databases, storing objects, or configuring Cloudflare resources. Covers worker deployment, KV namespaces, D1 SQL databases, R2 o | |
| openclaw-deal-scout Autonomous Gmail-to-CRM deal pipeline for solo operators. Classifies inbound deal emails with Gemini, logs them to a free HubSpot CRM, notifies on Discord, and sends approved replies during UK business hours. Zero hosted infrastructure — ru | |
| Daeva Use this skill whenever the user wants to interact with local or remote GPU pods for AI inference tasks. This includes transcribing audio (Whisper/speech-to-... | |
| Aibrary 100 [Aibrary] Access Aibrary's curated list of 100 must-read books for the AI age, organized by category. Use when the user asks about essential books, wants the... | |
| Aibrary Book Recommend [Aibrary] Recommend books based on user interests, goals, challenges, or career stage. Use when the user asks for book recommendations, says they don't know... | |
| Aibrary Book Search [Aibrary] Search and find books based on user scenarios, needs, questions, or keywords. Use when the user describes a situation, challenge, or topic and want... | |
| Aibrary Foryou Topic [Aibrary] Generate personalized 'For You' book topic recommendations based on the user's profile, interests, career stage, and recent learning activity. Use... | |
| Aibrary Growth Plan [Aibrary] Create a structured personal growth plan with book recommendations, milestones, and actionable weekly tasks. Use when the user wants to create a le... | |
| Aibrary Podcast Dialogue [Aibrary] Generate a book dialogue podcast script with two speakers — a host and a guest expert — discussing the book's ideas in a natural conversation. Use... | |
| Aibrary Podcast Ideatwin [Aibrary] Generate a book Idea Twin podcast script — an intellectually stimulating debate between the user's AI twin and a book expert. Based on Vygotsky's Z... | |
| Aibrary Podcast Summary [Aibrary] Generate a book summary podcast script in a single-narrator storytelling style. Use when the user wants to turn a book into a podcast, create an au... | |
| Aibrary Reading List [Aibrary] Generate a curated, themed reading list with multiple books organized in a logical reading order. Use when the user wants a systematic book list on... | |
| 虾格测试 Conducts AI behavioral self-assessments based on actual task history and identity files to reveal personality type and working patterns. | |
| Ogment Invoke MCP tools via Ogment CLI — secure access to Linear, Notion, Gmail, PostHog, and 100+ SaaS integrations through Ogment's governance layer. | |
| ogment-agentic-cli Access business integrations (SaaS, APIs, data) securely through Ogment. Use when the user asks to query, create, update, or manage data in external systems... | |
| Aviasales Flight Search Search for cheap flights and airfare via Travelpayouts/Aviasales API. Supports date-specific search, price calendar, round-trip, cheapest-price monitoring, p... | |
| Google Docs Formatter Instruction-only workflow for formatting, editing, and creating Google Docs using the existing gog skill/CLI. Use when a user asks to format a Google Doc, co... | |
| Skill Playwright Html Pdf Renderer Migrate2 Render deterministic PDFs from HTML using local Playwright/Chromium. | |
| Gate MCP Installer One-click installer and configurator for Gate MCP (mcporter) in OpenClaw. Use when the user wants to (1) Install mcporter CLI tool, (2) Configure Gate MCP se... | |
| AI-Music-Stream Generate AI music from text prompts and stream continuously in-browser with a shareable player URL; all tracks are saved locally in a library. | |
| MusicPlaylistGen Generate natural language playlists from your local music library using LLMs, accessible via web or API after indexing your music folder once. | |
| Self-Improvement System Runs a continuous self-improvement loop that helps the agent learn from mistakes, extract lessons, and refine its behaviour over time. Use when the user says... | |
| Miles Ask Miles (askmiles.ai) card and points questions against the owner's real wallet: which card to get next, keep-or-cancel math, transfer partners and ratios, award strategy, and which card to use for a purchase. Use when a current multiplie | |
| clawtrial | |
| ClawTrial Courtroom AI Courtroom for behavioral oversight. Autonomous daemon that monitors conversations, detects behavioral violations, and posts cases to a public API. Auto-st... | |
| clawder Use Clawder to sync identity, browse post cards, swipe with a comment, and DM after match. | |
| Crypto News Ranked by AI No API key, instant access. Binance and CoinGecko use our news data. AI reads 20+ crypto media outlets in real time and ranks every article by importance. Ma... | |
| Claude Code Changelog Monitor Monitor Claude Code releases and get Telegram alerts when new versions ship. Zero AI credits — pure bash monitoring. | |
| ClawFlight Find flights with Starlink satellite WiFi. Filters to Starlink-equipped airlines only, ranks by WiFi score/price/jet lag, returns affiliate booking links. Us... | |
| Session Health Monitor Context window health monitoring for OpenClaw agents — threshold warnings via Telegram, pre-compaction snapshots, and memory rotation. | |
| assistant-mail Free (1 mailbox, 25 emails/day): https://app.assistant-mail.ai/?plan=free&utm_source=clawhub&utm_medium=skill&utm_campaign=clawhub_free — managed agent email for OpenClaw & Hermes with allowlist, consent, retention, send caps. Install: open | |
| Agent SecuritySandbox Execute untrusted code or commands in a secure, isolated Docker environment. Use when asked to run unknown scripts, third-party skills, or any code that migh... | |
| EarningsFinancialsAgent An autonomous agent for monitoring corporate earnings and analyzing financial statements using yfinance. | |
| HomeNetworkSecurityAgent Audits local network infrastructure, identifies active hosts, and scans the gateway/public IP for exposed ports and vulnerabilities. | |
| IdentityMonitoringAgent An OSINT sentinel that monitors the public web for email exposure, username footprint, and identity leaks without API keys. | |
| Sanfrancisco Today Festivalevents Agent Harvests, indexes, and searches today's festivals and events in San Francisco. | |
| Posthive Schedule social media posts to 13 platforms (Bluesky, Threads, Instagram, LinkedIn, Mastodon, YouTube, Facebook Pages, Pinterest, Telegram, X/Twitter, Nostr)... | |
| Local YDB Toolkit Operate local-ydb schemas and deployments | |
| Airfoil Control AirPlay speakers via Airfoil from the command line. Connect, disconnect, set volume, and manage multi-room audio with simple CLI commands. | |
| Home Music Control whole-house music scenes combining Spotify playback with Airfoil speaker routing. Quick presets for morning, party, chill modes. | |
| PM2 Process Manager Manage Node.js applications with PM2 process manager. Use for deploying, monitoring, and auto-restarting Node apps in production. Covers starting apps, viewing logs, setting up auto-start on boot, and managing multiple processes. | |
| Portainer Control Docker containers and stacks via Portainer API. List containers, start/stop/restart, view logs, and redeploy stacks from git. | |
| Vertical Font Conversion （CHINESE） Local-only skill for converting horizontal Chinese fonts into high-quality vertical-reading TTF fonts with a preview-first workflow, grouped glyph rules, and... | |
| Quality Convergence Engine Multi-dimensional Quality Acceptance and Problem Convergence Engine - Deeply deconstruct requirements, eliminate extreme defects, define absolutely objective... | |
| Daily Summary Automatically generate a daily learning summary including date, achievements, task status, plans, and detailed token usage statistics from Bailian API. | |
| Dinstein Tech News Digest Generate tech news digests with unified source model, quality scoring, and multi-format output. Six-source data collection from RSS feeds, Twitter/X KOLs, Gi... | |
| Agent Browser A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured co... | |
| BotLearn botlearn — BotLearn social community SDK for AI agents to post, comment, vote, follow, DM, and join events; triggers when user mentions botlearn, community,... |
13,201–13,250 of 108,824