Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Openclaw Security Unified security suite for agent workspaces. Installs, configures, and orchestrates all 11 OpenClaw security tools in one command — integrity, secrets, permissions, network, audit trail, signing, supply chain, credentials, injection defense | |
| Openclaw Sentinel Supply chain security for agent skills. Pre-install inspection, post-install scanning, obfuscation detection, and known-bad signature matching. Verify skills are safe before they touch your workspace. Free alert layer — upgrade to openclaw- | |
| Openclaw Sentry Scan workspace files for leaked secrets: API keys, tokens, passwords, private keys, and credentials. Detects AWS, GitHub, Slack, Stripe, OpenAI, Anthropic, Google, Azure keys and more. Free alert layer — upgrade to openclaw-sentry-pro for a | |
| Openclaw Signet Cryptographic skill verification. Sign installed skills with SHA-256 content hashes and verify they haven't been tampered with. Detects modified, added, and removed files within skill directories. Free alert layer — upgrade to openclaw-sign | |
| Openclaw Smart Router Automatically routes AI requests to cost-optimal models based on task complexity and budget, saving 30-50% on model expenses with adaptive learning. | |
| Openclaw Triage Incident response and forensics for agent workspaces. Investigate compromises, build timelines, assess blast radius, and collect evidence. Cross-references data from warden, ledger, signet, and sentinel for unified analysis. Free alert laye | |
| Openclaw Vault Credential lifecycle security for agent workspaces. Audit credential exposure, detect misconfigured permissions, inventory all secrets, and identify stale credentials needing rotation. Free alert layer — upgrade to openclaw-vault-pro for au | |
| Openclaw Warden Verify workspace file integrity and scan for prompt injection patterns in agent identity and memory files. Detects unauthorized modifications to SOUL.md, AGENTS.md, IDENTITY.md, memory files, and installed skills. Free detection layer — upg | |
| OpenClaw Warden Pro Full workspace security suite: detect unauthorized modifications, scan for prompt injection patterns, and automatically respond with countermeasures — snapshot restore, skill quarantine, git rollback, and automated protection sweeps. The co | |
| Skill Vetter Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,... | |
| Zynd Agent Network Connect to the Zynd AI Network to discover, communicate with, and pay other AI agents. Search for specialized agents by capability, send them tasks with auto... | |
| Ai Video Prompt AI视频Prompt构建专家。采用"首尾帧图片+视频"工作流，支持多段5秒视频拼接生成长视频（30秒/60秒）。先生成关键帧图片，再生成视频Prompt，确保段与段之间无缝衔接。针对即梦平台优化，支持全中文Prompt输出。 | |
| Baby Photo Book Generate professional baby photo books from photos with intelligent layout. Automatically organizes photos by baby's age stages, applies smart layouts to min... | |
| Doubao Web Image Use Playwright to host a browser and call Doubao Web's image generation function. Call this skill when the user requests to draw or generate an image using D... | |
| thecede Access and manage your persistent knowledge graph for storing, retrieving, linking, and summarizing facts, decisions, goals, and observations across sessions. | |
| sages-stash Returns a non-R18 image as a "surprise" when users search for NSFW content using specified trigger keywords. | |
| 个人数字资产盘点管家 盘点一个人的数字资产（经验诀窍/模板/数据/工具/内容/设计/影响力/AI 资产），用 9 题自检打分，产出八字段资产卡；已授权时可操作 zengzhi.life 的 Agent 工作流（建单→素材→报告→展示页，止于公开展示之前）。触发词：个人数字资产、盘点、数字资产报告、知识变现、副业、经验变现、zengzhi.life，或问"我有什么可以变成资产"。 | |
| 一人公司记账管家 给一人公司/个体户做全套账：适用判定→输入契约→分录→月结→申报底稿→凭证归档，附中国财税口径卡（每月复核更新，引用必带版本号）。适用小规模纳税人、查账征收、月流水≤200笔、无员工社保；一般纳税人/社保场景只出初稿并提示复核。触发词：记账、对账、月结、报税、申报提醒、一人公司、个体户、小规模、公私混用、税期日历。 | |
| claude-audit Full project audit — launches 5 parallel AI agents (security, bugs, dead code, architecture, performance) to scan your codebase read-only, then compiles a un... | |
| drin-agent-inbox Run an autonomous email inbox with Drin — receive inbound email on a domain, read conversation threads, and reply in-thread. Use when building or operating an agent that must read and respond to email (support triage, scheduling, an "email | |
| drin-build-template Build a transactional HTML email that renders correctly across Gmail, Outlook, and Apple Mail, with a plain-text alternative and dark-mode support. Use when writing or editing the HTML/text body of an email, or creating a reusable Drin temp | |
| drin-email-best-practices Get transactional email deliverability right with Drin — authenticate the sending domain (SPF/DKIM/DMARC), stay under bounce/complaint limits, honor suppressions, and include one-click unsubscribe where required. Use when setting up a sendi | |
| drin-send-email Send a transactional email through Drin reliably. Use when the user or agent needs to send an email (notification, receipt, OTP, alert, password reset, reply) via the Drin email API — covers picking a verified sending domain, composing the | |
| SrbijaVoz Timetable and Announcements Check official Srbija Voz notices, station matches, and timetable metadata. Use when verifying live train delays, cancellations, stoppages, or replacement bu... | |
| Long Run Hybrid Coach Adaptive run and strength plan | |
| scheduler notification runbook Reliable runbook for scheduled reminders and notification workflows with OpenClaw cron. Use when creating or reviewing reminder skills, scheduling one-shot o... | |
| Atomic Mail Read and write email through the Atomic Mail from an AI agent. Handles proof-of-work authentication and JMAP so the agent thinks in JMAP method calls. Use when the user asks to register an email inbox, list mailboxes, fetch or send email, o | |
| 负一屏购物 用户在场/不在场购买skill | |
| PyAI Phone Calls Make user-approved phone calls with the PyAI CLI, check call status, and retrieve available summaries or transcripts. Use when the user explicitly asks to call someone through their PyAI project. Requires PyAI CLI, account access, calling p | |
| PyAI Hear — Audio Transcription Transcribe user-supplied voice notes, interviews and recordings with PyAI Hear using the official CLI. Supports local audio and asynchronous HTTPS audio jobs, with available speaker/timestamp results. Requires a PyAI account and transcripti | |
| PyAI Recap — Conversation Summaries Retrieve summaries with `pyai recap get`, or summarize timed customer/agent transcripts with `pyai request`. Use for PyAI Recap IDs, key points and action items. This skill is guidance for the `pyai` CLI; `pyai-recap` is not an executable o | |
| PyAI Speak — Text to Speech Turn user-requested text, assistant answers, briefings or messages into an audio file with PyAI Speak text-to-speech using the official CLI. Discover available voices and return playable output. Requires a PyAI account and speech permission | |
| Craft API Skill and Obsidian Migration Tool Integrate with Craft.do to automate tasks, create/manage documents and folders, edit markdown content, and migrate Obsidian vaults using their REST API. | |
| Arcascience Email Email assistant for Romain at ArcaScience to read, triage, and draft context-aware replies using pharma dossiers, adapting tone and language per sender profile. | |
| Daily Prospection Intel Generates a daily .docx report identifying 8 specific European regulatory opportunities in pharma for ArcaScience's BRA platform, prioritizing recent EMA dev... | |
| Atoship Ship packages with AI — compare rates across USPS, FedEx, and UPS, buy discounted labels, track shipments, and manage orders. Requires user confirmation befo... | |
| OpenClaw Agent Swarm Multi-agent coding system. Spawn and manage autonomous coding agents with OpenClaw. | |
| Deep Infra Configure DeepInfra model routing with provider auth, model selection, fallback chains, and cost-aware defaults for stable open-source and frontier model wor... | |
| Obsidian FNS Control a remote Obsidian vault through Fast Note Sync. Use when reading, searching, writing, or appending notes in Obsidian from OpenClaw, especially for re... | |
| travel-subsidy When the user uploads 发票.zip and 火车票.zip, use the included data tables to calculate eligible business-trip subsidy records, split related vs remaining files,... | |
| Invoice Agent Professional invoice and payment management skill. Create, track, and manage invoices with natural language. Supports multi-currency, tax calculations, payme... | |
| CoolTrade 股票行情与分析大师 获取中国 A 股、美股、全球大盘以及期市的行情与深度财务面分析，支持加密货币实时行情与买卖信号，AI 生成每日 A 股精华日报，并提供多通道（微信/Telegram）股价预警推送。 | |
| McKinsey-style Decision Memo Writer Turn long documents, reports, proposals, and email threads into decision-ready memos with key points, risks, open questions, and next steps. | |
| McKinsey-Style Meeting Brief Copilot Turn people, companies, agendas, notes, and email threads into consulting-style meeting briefs, sharp questions, follow-up emails, and action items. | |
| OPC Essentials A premium operating system skill for one-person companies covering triage, pipeline, sales calls, proposals, follow-ups, renewals, cash collection, weekly an... | |
| Xiaohongshu Founder Growth Writer Turn rough notes, founder insights, and English drafts into natural Xiaohongshu posts that feel human, trustworthy, and platform-native. | |
| Expert Finder Find domain experts, thought leaders, and subject-matter authorities on any topic. Searches Twitter and Reddit for people who demonstrate deep knowledge, frequent discussion, and above-average expertise in a specific field. Expert discovery | |
| Instagram Search Instagram Search — Search 400M+ Instagram posts, reels, and profiles. Find influencers, track hashtags, analyze engagement, and export data. No Instagram API or Meta developer account needed — works through Xpoz MCP. | |
| Lead Generation Lead Generation — Find high-intent buyers in live Twitter, Instagram, and Reddit conversations. Auto-researches your product, generates targeted search queries, and discovers people actively looking for solutions you offer. Social selling a | |
| Reddit Search Reddit Search — Search posts, comments, users, and subreddits across 100M+ indexed Reddit entries. Find discussions, track topics, discover communities, and analyze engagement. No Reddit API key needed — works through Xpoz MCP with natural |
13,501–13,550 of 108,824