Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| BotLearn Assessment botlearn-assessment — BotLearn 5-dimension capability self-assessment (reasoning, retrieval, creation, execution, orchestration); triggers on botlearn assess... | |
| BotLearn Healthcheck botlearn-healthcheck — BotLearn autonomous health inspector for OpenClaw instances across 5 domains (hardware, config, security, skills, autonomy); triggers... | |
| BotLearn Reminder botlearn-reminder — BotLearn 7-step onboarding guide that delivers quickstart tutorials every 24 hours; triggers on first BotLearn registration or when user... | |
| Daily Summary 自动生成包含Token用量和任务完成情况的每日学习总结报告并保存为指定日期Markdown文件。 | |
| Deep Research Deep Research Agent specializes in complex, multi-step research tasks that require planning, decomposition, and long-context reasoning across tools and files... | |
| Dinstein Tech News Digest Generate tech news digests with unified source model, quality scoring, and multi-format output. Six-source data collection from RSS feeds, Twitter/X KOLs, Gi... | |
| MoltsPay AI Agent's crypto wallet manager - generate wallets, manage transactions, and claim ORA token rewards. | |
| Proactive Agent Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autono... | |
| SearXNG (XiaoDing) Privacy-respecting metasearch using your local SearXNG instance. Search the web, images, news, and more without external API dependencies. | |
| Self Improving Agent Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Skill Vetter Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,... | |
| Stock Retrieve real-time stock data including price, change, volume, and turnover for A-share, Hong Kong, and US markets via Sina Finance. | |
| Weather Get current weather and forecasts (no API key required). | |
| Aster-Skill Monitors crypto news for BTC, ETH, SOL, BNB; classifies sentiment; and executes leveraged long/short orders on Aster with risk controls. | |
| DeepBook CLI. Watch, Make & Take the Sui Market Operate the deepbook CLI for DeepBook reads (REST/SSE), global ~/.deepbook config/account management, on-chain spot trading, top-level swap execution, balance-manager ops, and margin trading. | |
| DeepReader The default web content reader for OpenClaw. Reads X (Twitter), Reddit, YouTube, and any webpage into clean Markdown — zero API keys required. Use when you n... | |
| DocuClaw Sovereign document intelligence & archival system. Extracts structured data from invoices, receipts, and contracts 100% locally using AI. | |
| hypawave Give an AI agent an address on Hypawave — private agent-to-agent messaging (waves), free private file handoffs, and buying or selling files, APIs, data, or compute over Bitcoin Lightning, non-custodial, with a verified Lightning preimage as | |
| OpenClaw Config Ops Safe OpenClaw gateway configuration operations. Use when reading, analyzing, or modifying openclaw.json. Enforces schema validation + official documentation... | |
| Openclaw Ref OpenClaw 配置、CLI、排错、模型管理完整参考手册。修改 openclaw.json、执行 CLI 命令、排查问题时必须查阅此 Skill。 | |
| 日常小助手 MCP Server AI-powered daily task management MCP Server — recommend next task, inherit uncompleted todos, detect overdue, generate reviews. Deterministic ops in code (ze... | |
| LinkedCamp LinkedIn automation and multi-channel outreach (LinkedIn + email) for GTM teams with LinkedCamp — build and launch campaigns, generate audience searches, author multi-step sequences, manage leads, work the unified inbox, set up AI reply age | |
| 设计走查 设计走查:将生成的 HTML/CSS 页面对照设计规范文档逐项审查,输出结构化合规报告。 当用户说"设计走查"、"走查页面"、"检查是否符合设计规范"、"审查设计合规"时触发。 生成任何 HTML/CSS 页面后也可主动触发,确保输出符合设计规范。 用户可指定任意设计规范文档路径,skill 会自动读取并逐项对照检查。 | |
| Search and Book Flights Find, book, and change flights for your human via email. One message, and done. (by BonBook) | |
| Travel Agent Skill Find, book, and change flights for your human via email. One message, and done. (by BonBook) | |
| Enable Chrome Gemini Set up or repair Gemini in Chrome (Glic) on Windows, macOS, or Linux when enabling it for the first time outside the US or when the sidebar, floating panel,... | |
| Skill Search Find and retrieve available skills using keyword search, semantic search, or LLM-powered task matching. Use when the agent needs to discover, search, or inte... | |
| Record screen, microphone or camera from macOS terminal macOS CLI tool to record microphone audio, screen video or screenshot, and camera video or photo from the terminal with device listing and output control. | |
| Speechall command-line tool for fast speech-to-text transcription using multiple providers Install and use the speechall CLI tool for speech-to-text transcription. Use when the user wants to: (1) transcribe audio or video files to text, (2) install speechall on macOS or Linux, (3) list available STT models and their capabilities, | |
| Translate CLI End-user guide for running and configuring the `translate` CLI across text/stdin/file/glob inputs, provider selection, presets, custom prompt templates, and... | |
| Atlassian MCP (Jira, Confluence) Run the Model Context Protocol (MCP) Atlassian server in Docker, enabling integration with Jira, Confluence, and other Atlassian products. Use when you need to query Jira issues, search Confluence, or interact with Atlassian services progra | |
| Competitive Research Use when the user asks to research a competitor, map a market, analyze a category, or produce a competitive brief. Trigger phrases: 'research competitors of... | |
| Niri IPC Control the Niri Wayland compositor on Linux via its IPC (`niri msg --json` / $NIRI_SOCKET). Use when you need to query Niri state (outputs/workspaces/windows/focused window) or perform actions (focus/move/close windows, switch workspaces, | |
| claude-code-cli Delegate coding tasks to Claude Code CLI via background process. Use when: building features, reviewing PRs, refactoring codebases, or iterative coding that... | |
| IQAir Air Quality Get real-time air quality data from IQAir API for any location worldwide. Returns AQI (Air Quality Index) with visual indicators and quality levels. Use when... | |
| Automate Job Application Automatically find and apply to jobs that match the user's resume using the resumex.dev API, web search, and browser automation. Use this skill whenever the... | |
| Auto Job Applying Agent Manage your Resumex resume and automatically apply to jobs — all through natural conversation. Fetches your live resume from Resumex, uses built-in web searc... | |
| athletedata Read the user's own training and health data (Garmin, Oura, WHOOP, Hevy, Apple Health, Intervals.icu and 33 more apps) through the athletedata MCP server. Use when the user asks about their workouts, training load, HRV, sleep, recovery, rea | |
| escalation-governance Assess whether to escalate models | |
| friction-detector Detect friction signals; graduate patterns into rules. Use for session retrospectives | |
| hook-authoring Guide creating Claude Code hooks with security-first design. Use for validation and enforcement | |
| hook-scope-guide Select hook scope (plugin, project, global) by audience | |
| hooks-eval Evaluate hook security, performance, and SDK compliance. Use for audits | |
| metacognitive-self-mod Analyze and improve the improvement process. Use for detecting regressions and meta-optimization | |
| methodology-curator Surface expert frameworks | |
| modular-skills Build composable skill modules with hub-and-spoke loading | |
| plugin-review Review plugin quality with tiered checks and dependency scoping. Use for PR and pre-release audits | |
| rules-eval Evaluate Claude Code rules in .claude/rules/. Use for frontmatter, globs, and quality audits | |
| shared-patterns Provide reusable patterns for validation, error handling, scaffolding. Use for skill consistency | |
| skill-authoring Guide creating Claude Code skills with TDD and persuasion principles. Use for new skill development |
13,251–13,300 of 108,824