Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Social Intelligence Social Intelligence — AI-powered social media research across Twitter, Instagram, and Reddit. 1.5B+ posts indexed. Find experts, generate leads, monitor brands, analyze sentiment, discover influencers, and export data. The complete social i | |
| Social Sentiment Sentiment analysis for brands and products across Twitter, Reddit, and Instagram. Monitor public opinion, track brand reputation, detect PR crises, surface complaints and praise at scale — analyze 70K+ posts with bulk CSV export and Python/ | |
| Twitter Api Alternative Twitter API Alternative — Search 1B+ tweets with natural language queries, boolean filters, and one-click CSV exports (up to 64K rows). Look up profiles, find users by topic, and track conversations. No developer account needed, no complex | |
| Xpoz Setup Set up and authenticate the Xpoz MCP server for social media intelligence. Required by all Xpoz skills. Handles server configuration, OAuth login, and connection verification with minimal user interaction. | |
| Xpoz Social Search Search Twitter, Instagram, and Reddit posts in real time. Find social media mentions, track hashtags, discover influencers, and analyze engagement — 1.5B+ posts indexed. Social listening, brand monitoring, and competitor research made easy | |
| Agent Communication 标准化跨 Agent 通信协议。当需要向另一个 Agent 询问、协作或委托任务时，使用本技能。 | |
| audiobooklm AudioBookLM 有声创作平台 skill。用于播客生成、单播有声书、多播有声书、多人演播、章节合成、角色音色绑定、混音上架等任务；通过 audiobooklm_mcp 调用远端工具。 | |
| audiobooklm-podcast 基于新音剪创作平台以及珠峰AI自研音色，提供播客创作、内容管理、音频生成、专辑上架等功能。适用于用户提出"播客生成"、"播客制作"等需求。 | |
| Draft Machine Use this skill whenever the user wants to send a batch of personalized emails, do a mail merge, or draft outreach emails for multiple recipients using Gmail.... | |
| Motion Skill Use this skill when the user pastes a Motion invite URL (contains /invite/ or /agent/), asks to "edit a Motion document", "connect to Motion", "collaborate o... | |
| Competitor Watch Know what your competitors ship before their customers do. Automated monitoring of competitor websites, product pages, pricing, content, and social presence. Detects changes, extracts new features, tracks pricing updates, and alerts you wit | |
| Content Repurposer Transform long-form content into platform-optimized snippets. Your agent takes one blog post, video transcript, or podcast notes and generates ready-to-publish Twitter threads, LinkedIn posts, email newsletters, and Instagram captions. Main | |
| Invoice Chaser Automated invoice follow-up sequences that escalate from friendly to firm. Track unpaid invoices, send timed reminder emails with escalating tone, log payment interactions, and generate AR aging reports. Your agent handles the awkward conve | |
| Lead Enrichment Turn a name into a full dossier in seconds. Feed in a name + company (or email, or LinkedIn URL) and get back a rich profile with social links, bio, company intel, recent activity, and personalized talking points. Aggregates data from multi | |
| LinkedIn Autopilot Your agent builds your LinkedIn presence while you sleep. Schedule posts, auto-engage with target accounts, run personalized DM sequences, and never miss an engagement opportunity. Handles connection requests, profile visiting campaigns, po | |
| Meeting Prep Agent Never walk into a meeting unprepared again. Your agent researches all attendees before calendar events—pulling LinkedIn profiles, recent company news, mutual connections, and conversation starters. Generates a briefing doc with talking poin | |
| Trawl Autonomous lead generation through agent social networks. Your agent sweeps MoltBook using semantic search while you sleep, finds business-relevant connections, scores them against your signals, qualifies leads via DM conversations, and rep | |
| Augent The audio & video layer for agents. 22 local MCP tools. No cloud, no API keys. | |
| Anti-Laziness Protocol AI Agent 反懒贪协议 - 防止AI在工作过程中偷懒的规范体系 当用户要求源码解读、技术调研、报告撰写、文档校验时触发 包含8条铁律、场景专项规范（校验/写作/源码）、自检清单 | |
| Michael Polanyi Writing skill for practitioner judgment under ambiguity, critique, trade-offs, and incomplete information. Use it when the user wants advice, strategy, or de... | |
| Scihub Paper Downloader Get a PDF link from Sci-Hub for a DOI. | |
| BotRoast Roast your human on BotRoast.ai — Comedy Central-style burns generated from MEMORY.md. Auto-submit roasts via API or run on heartbeat. | |
| Spec Kit Use GitHub Spec Kit for Spec-Driven Development. Initialize projects, create specifications, and build software using the /speckit.* slash commands. Supports... | |
| Detector of prompt injection Detect prompt injection attacks and adversarial inputs in user text before passing it to your LLM. Use when you need to validate or screen user-provided text... | |
| coda.io CLI to read Coda.io documents and pages. List docs, list pages, read content in markdown/json/html. | |
| Aura for OpenClaw Compile multi-format documents into local queryable knowledge bases and manage persistent AI memory tiers using Aura Core with zero network requests. | |
| Aura Security Scanner Scan AI agent skills for malware, credential theft, prompt injection, and dangerous permissions before installing them | |
| hyperliquid-trade Trade on Hyperliquid — spot and perpetual futures. Supports market orders (IOC), limit orders (GTC), leverage setting, WDK wallet, and USDC deposit from Arbi... | |
| polymarket-trade Trade on Polymarket prediction markets on Polygon. Supports browsing markets, checking wallet/CLOB balance, and buying or selling YES/NO shares with safety g... | |
| xaut-trade Buy or sell XAUT (Tether Gold) on Ethereum. Supports market orders (Uniswap V3) and limit orders (UniswapX). Wallet modes: Foundry keystore or WDK. Delegates... | |
| geo-scan Audit the answer-engine readiness (ChatGPT, Perplexity, Claude, Gemini, AI Overviews) of one public website URL and produce a prioritised fix list. Use when someone gives a public site or page URL and asks whether AI engines can crawl, cite | |
| Aureus Arena Build and operate autonomous AI agents that compete in Aureus Arena, a fully on-chain Colonel Blotto game on Solana. Use when the user asks about Aureus, Col... | |
| Aurex Issue virtual crypto-funded cards and manage payments with the Aurex API. Use when users want to create virtual Visa/Mastercard cards, handle crypto deposits... | |
| Agent Browser Clawdbot 0 Headless browser automation CLI optimized for AI agents with accessibility tree snapshots and ref-based element selection | |
| Personal Growth Coach Provide daily open-ended exercises using structured thinking, critical analysis, and logical frameworks to improve cognition, communication, and personal gro... | |
| arxiv_deep_reader 利用python，指定某个arxiv_id/url， 基于 LLM Agent 对这篇arxiv论文进行分类与深度阅读，直接print打印阅读笔记 | |
| xeon_asr Automatically converts received voice messages to text via an external ASR service, supporting multiple audio formats and integrating with OpenClaw. | |
| xeon_tts Local TTS skill using OpenVINO Qwen3-TTS for voice cloning and emotion style synthesis, supporting QQBOT workflows with strict audio length and file retentio... | |
| Java Security Audit - AI驱动的Java代码审计 AI驱动的Java代码安全审计技能，实现系统化、高覆盖率的漏洞挖掘。使用场景： (1) 审计Java/Kotlin项目寻找安全漏洞（0day挖掘、代码审计、安全评估） (2) 企业级代码库的安全审计（支持大型项目） (3) 需要高质量、低幻觉率的安全审计报告 (4) CI/CD集成的前期漏洞发现 触发关键词：Ja... | |
| Web Fetcher Fetch web pages and extract readable content for AI use. Use when reading, summarizing, or crawling a specific URL or small set of URLs. Prefer low-friction... | |
| Web Fetcher Fetch web pages and extract readable content for AI use. Use when reading, summarizing, or crawling a specific URL or small set of URLs. Prefer low-friction... | |
| Showstart Skills 秀动演出查询与管理工具。用于查询秀动平台上的演出信息，包括演出详情、城市搜索、分类搜索、风格搜索、艺人搜索、附近演出等功能。当用户需要查找演出信息、了解演出详情、按城市/分类/风格搜索演出、或查找附近演出时使用此技能。 | |
| Bidding Analysis Report 招标数据分析报告生成技能 - 支持AI项目占比分析、年度趋势分析、TOP机构排名，自动生成Word/PDF报告，嵌入高质量图表。适用于高校招标、政府采购、企业采购等场景。 | |
| G2量化交易策略 基于21组策略回测，提供沪深300量化交易系统，年化收益21.2%，夏普率1.12，含智能选股和严格风控。 | |
| Timeline Chart Generator Professional timeline chart generator with Chinese/number support and dynamic layout | |
| Agent Spawner Spawn a new OpenClaw agent through conversation. Uses official Docker setup and non-interactive onboarding, carries over API keys, tools, plugins, and skills... | |
| Austine Daily Ops Daily execution and trip-ops command system for Austine. Use when asked to run daily brief/checklist/status workflows, track priorities, or plan and procure... | |
| Browser Booking Agent Execute booking/search flows via browser automation with verification artifacts. Use for reservation forms, availability checks, and capture of proof (screen... | |
| Email Outreach Ops Draft and manage vendor outreach emails for quotes/availability, follow-up cadence, and response summarization into structured decision tables. Use when cont... | |
| Expense Claims Ops Process personal/work expenses and reimbursement claims in a structured, low-friction workflow. Use when collecting receipts, categorizing spend, preparing c... |
13,551–13,600 of 108,824