Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| workflow-improvement Evaluates and improves skills, agents, commands, and hooks after a workflow slice | |
| doc-generator Generates or remediates documentation with human-quality writing | |
| doc-importer Converts external documents (PDF, DOCX, PPTX, XLSX, HTML) into editable markdown | |
| session-replay Converts a Claude Code session JSONL file into an animated GIF terminal replay | |
| session-to-post Converts a Claude Code session into a blog post, case study, or Reddit post | |
| slop-detector Detects AI-generated writing patterns in prose | |
| style-learner Extracts writing style patterns from exemplar text into a reusable profile | |
| tech-tutorial Plans, drafts, and refines technical tutorials for developers | |
| voice-extract Extracts a user's writing voice from text samples via SICO comparative analysis | |
| voice-generate Generates text in a learned writing voice | |
| voice-learn Improves a voice profile by learning from manual edits. Use after editing generated text to refine registers and close voice drift over time | |
| voice-review Runs parallel prose and craft review agents against a voice profile | |
| browser-recording Records browser sessions via Playwright and converts video to GIF | |
| gif-generation Converts webm/mp4 video files to optimized GIFs via ffmpeg with configurable quality settings | |
| media-composition Combines GIFs and videos into composite tutorials with vertical or grid layouts via ffmpeg | |
| vhs-recording Generates terminal recordings using VHS tape scripts and produces GIF outputs | |
| spec-writing Creates clear, testable specifications from feature descriptions with user stories | |
| speckit-orchestrator Orchestrates Spec Driven Development by coordinating spec, plan, and task skills | |
| task-planning Generates phased, dependency-ordered implementation tasks from specifications. Use after spec is complete and before starting implementation | |
| code-search Searches GitHub for existing implementations, libraries, or patterns | |
| dig Refines an active research session by drilling deeper into a subtopic. Use after tome:research to narrow results to a specific channel or angle | |
| discourse Scans HN, Lobsters, Reddit, and tech blogs for community experience reports | |
| papers Searches academic literature via arXiv, Semantic Scholar, and open-access PDFs | |
| research Runs multi-source research across GitHub, HN, Reddit, arXiv, and Semantic Scholar | |
| synthesize Merges, dedupes, ranks, and formats research findings into a report. Use after research agents return results from multiple channels to produce a ranked report | |
| triz Applies TRIZ cross-domain analogical reasoning to find solutions from adjacent fields | |
| Andara Meeting Minutes Capture meeting summaries and action items from voice or text | |
| Andara Rag Search Search the Andara Ionic RAG knowledge base (3,800+ records) for business intel, research, products, team, meetings, and any indexed content. | |
| Andara Self Improvement Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Knowledge Gaps Track questions Hans failed to answer and flag missing knowledge | |
| Openclaw Admin Manage and inspect the OpenClaw multi-agent gateway — list agents, check model health, view routing rules, manage crons, inspect context budgets, and run sys... | |
| Canopy Canopy treasury wallet for AI agents — make policy-gated USD payments on-chain (Base), auto-pay paywalled APIs (x402 / MPP), and discover paid services. Ever... | |
| Markster OS Lightweight guide and router for Markster OS. Use to explain the system, point users to the full Git-backed workspace setup, and help them decide whether to... | |
| Kaspa News Kaspa News — let your Claw know everything about Kaspa in one place: latest news, core development updates, ecosystem launches, community talks, and weekly r... | |
| Atlas Flight Booking Flexible flight search and safe Atlas booking | |
| Insecure Defaults Detection Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling. | |
| Desktop Sandbox A desktop sandbox lets OpenClaw run as natively as on a real OS, ensuring full functionality with safe isolation.Run OpenClaw without breaking your PC. | |
| WorkProtocol Agent Autonomous WorkProtocol agent that monitors jobs, claims matching code tasks, completes them via coding sub-agents, and delivers results for payment. Use whe... | |
| Data Toolkit Complete data conversion, validation, and cleaning toolkit. Convert between JSON/CSV/YAML/XML, validate schemas, clean duplicates and nulls. Essential utilit... | |
| StripFeed Fetch any URL as clean, AI-ready Markdown with token counts and caching. Strip ads, nav, scripts, and noise from web pages. | |
| Cost Governor Tracks LLM API costs in real-time, enforces budget limits with circuit breakers, and enables autonomous agent payments via the x402 protocol. | |
| Openclaw Action GitHub Action for automated security scanning of agent workspaces. Detects exposed secrets, prompt/shell injection, and data exfiltration patterns in PRs and commits. | |
| Openclaw Arbiter Audit installed skill permissions: detect network access, subprocess execution, file writes, unsafe deserialization, and environment variable usage. Permission matrix for every skill in your workspace. Free alert layer — upgrade to openclaw | |
| Openclaw Bastion Prompt injection defense for agent workspaces. Scan files for injection attempts, analyze content boundaries, detect hidden instructions, and maintain command allowlists. Free alert layer — upgrade to openclaw-bastion-pro for active blockin | |
| Openclaw Context Optimizer Intelligently compresses and optimizes context to reduce token usage by 40-60%, using deduplication, pruning, summarization, and adaptive learning. | |
| Openclaw Egress Network data loss prevention for agent workspaces. Scans skills and files for outbound URLs, data exfiltration endpoints, suspicious domains, and network function calls. Maps every external connection. Free alert layer — upgrade to openclaw | |
| Openclaw Ledger Tamper-evident audit trail for agent sessions. Hash-chained logs of workspace changes with cryptographic verification. Know exactly what changed, when, and detect if anyone altered the record. Free alert layer — upgrade to openclaw-ledger-p | |
| Openclaw Marshal Compliance and policy enforcement for agent workspaces. Define security policies, audit compliance, check command restrictions, and generate audit-ready reports. Free alert layer — upgrade to openclaw-marshal-pro for active enforcement, blo | |
| Openclaw Memory Persistent, locally stored semantic memory for agents with automatic learning, searchable facts, and optional paid unlimited retention across all sessions. | |
| openclaw-reflect Self-improvement layer with evaluation separation, rollback, and tiered operator gates. Observes outcomes across sessions, detects recurring patterns, propos... |
13,451–13,500 of 108,824