Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Travel Procurement Source, compare, and recommend travel transport options (bus/train/shuttle/taxi/private transfer) from user-provided trip constraints. Use for route planning... | |
| Controld Manage Control D DNS filtering service via API. Use for DNS profile management, device configuration, custom blocking rules, service filtering, analytics set... | |
| Airtable Participants Read and query retreat participant data from the Ceremonia Airtable base. Use this skill when asked about participants, subscriber counts, retreat attendance... | |
| ETHSkills Ethereum development knowledge for AI agents — from idea to deployed dApp. Fetch real-time docs on gas costs, Solidity patterns, Scaffold-ETH 2, Layer 2s, De... | |
| Acul Screen Generator Generates complete, branded Auth0 Advanced Custom Universal Login (ACUL) screen implementations using the React or Vanilla JS SDK. Use when a developer asks... | |
| Auth0 Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, SSO, Organizations, | |
| Auth0 Android Use when adding authentication to Android applications (Kotlin/Java) with Web Auth, biometric-protected credentials, and MFA - integrates com.auth0.android:a... | |
| Auth0 Android Major Migration Use when upgrading an Android app's Auth0 SDK (com.auth0.android:auth0) to the next major version. Detects the current version, checks prerequisites, and app... | |
| Auth0 Angular Use when adding authentication to Angular applications with route guards and HTTP interceptors - integrates @auth0/auth0-angular SDK for SPAs | |
| Auth0 Aspnetcore Api Use when securing ASP.NET Core Web API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth - integrates Auth0.AspNetCore.A... | |
| Auth0 Cli Reference for Auth0 CLI commands — apps, apis, users, roles, organizations, actions, logs, custom domains, universal-login, terraform, raw API mode, and --js... | |
| Auth0 Expo Use when adding authentication to Expo (React Native) mobile apps — login, logout, user sessions, protected routes, biometrics, or token management. Integrat... | |
| Auth0 Express Use when adding authentication (login, logout, protected routes) to Express.js web applications - integrates express-openid-connect for session-based auth. | |
| Auth0 Fastapi Api Use when securing FastAPI API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth - integrates auth0-fastapi-api for REST... | |
| Auth0 Fastify Use when adding authentication (login, logout, protected routes) to Fastify web applications - integrates @auth0/auth0-fastify for session-based auth. For st... | |
| Auth0 Fastify Api Use when securing Fastify API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth - integrates @auth0/auth0-fastify-api fo... | |
| Auth0 Flask Use when adding login, logout, and user profile to a Flask web application using session-based authentication - integrates auth0-server-python for server-ren... | |
| Auth0 Java Mvc Common Use when adding Auth0 login, logout, and callback handling to Java Servlet web applications - integrates com.auth0:mvc-auth-commons SDK for server-side Java... | |
| Auth0 Mfa Use when adding MFA, 2FA, TOTP, SMS codes, push notifications, passkeys, or when requiring step-up verification for sensitive operations or meeting complianc... | |
| Auth0 Migration Use when migrating or switching from an existing auth provider (Firebase, Cognito, Supabase, Clerk, custom auth) to Auth0 - covers bulk user import, gradual... | |
| Auth0 Nextjs Use when adding authentication to Next.js applications (login, logout, protected pages, middleware, server components) - supports App Router and Pages Router... | |
| Auth0 Nuxt Use when implementing Auth0 authentication in Nuxt 3/4 applications, configuring session management, protecting routes with middleware, or integrating API ac... | |
| Auth0 Quickstart Use when adding authentication or login to any app - detects your stack (React, Next.js, Vue, Nuxt, Angular, Express, Fastify, FastAPI, ASP.NET Core, React N... | |
| Auth0 React Deprecated — use the `auth0` skill instead (run `npx clawhub install auth0`). Use when adding Auth0 login, logout, protected routes, or user sessions to a React SPA. Integrates @auth0/auth0-react — use even if the user says "add login to my | |
| Auth0 React Native Use when adding authentication to React Native or Expo mobile apps (iOS/Android) with biometric support - integrates react-native-auth0 SDK with native deep... | |
| Auth0 Spa Js Use when adding authentication to Vanilla JS, Svelte, or any framework-agnostic single-page applications - integrates @auth0/auth0-spa-js SDK for SPAs withou... | |
| Auth0 Springboot Api Use when securing Spring Boot API endpoints with JWT Bearer token validation, scope-based authorization, or DPoP proof-of-possession - integrates com.auth0:a... | |
| Auth0 Swift Use when adding Auth0 authentication to an iOS, macOS, tvOS, watchOS, or visionOS application — integrates the Auth0.swift SDK for native Apple platform auth... | |
| Auth0 Swift Major Migration Use when upgrading an iOS or macOS app's Auth0.swift SDK from v2 to v3. Detects the current version, fetches the new SDK source to confirm API signatures, an... | |
| Auth0 Vue Use when adding authentication to Vue.js 3 applications (login, logout, user sessions, protected routes) - integrates @auth0/auth0-vue SDK for SPAs with Vite... | |
| Express Oauth2 Jwt Bearer Use when adding Auth0 token validation to Express or Node.js APIs - integrates express-oauth2-jwt-bearer SDK to protect Node.js API endpoints with JWT Bearer... | |
| knownas Give this OpenClaw a stable public name on knownas.dev: HTTPS, a public record of who runs it, and webhook and API addresses that survive tunnel restarts. | |
| Authensor Gateway Fail-safe policy gate for OpenClaw marketplace skills. Intercepts tool calls before execution and checks them against your Authensor policy. Low-risk actions run automatically. High-risk actions require your approval. Dangerous actions are | |
| ClawCoach Core AI health coach with dual personality modes (Supportive Mentor or Savage Roaster). Tracks nutrition from food photos, provides data-driven coaching, and hold... | |
| ClawCoach Food Food photo analysis and meal logging for ClawCoach. Send a photo of your meal and get instant macro breakdown via Claude Vision. | |
| ClawCoach Setup One-time setup for ClawCoach AI health coaching. Configures your profile, goals, macro targets, dietary preferences, and coach personality. | |
| delete-when-unzip Use when the user wants to extract/unpack large ZIP or RAR archives while disk space is limited, or mentions "delete when unzip", "边解压边删除", "extract and delete processed parts", "flat/unpack files", or segmented (multi-volume) archives (.z0 | |
| image-to-3d-part-stl Converts 2D images with labeled dimensions to accurate 3D models in STL files. Invoke when the user provides image(s) and metric constraints, requesting a 3D model or STL file. Useful for engineering plotting and 3D printing. | |
| 专利文档生成器 根据技术论文撰写中国专利技术交底书，用户需要提供技术论文或资料，以及至少一篇同领域的专利作为参考。关键词：专利申请、专利交底书、技术交底书、专利草稿。 | |
| social media scholar (zotero) 把论文帖分享给我，我帮你加进zotero：从公众号/小红书/X等社交媒体文章链接提取论文信息，将论文保存到 Zotero 文库。(When you share a link of social media article that contains citation a paper, this skill can... | |
| Software List Export Export installed software to CSV with versions and likely download URLs. Invoke when the user wants a machine inventory or reinstall list for a new computer. | |
| LinkPix 调用青虎 AI 媒体能力：AI 生图（套图/电商详情图/自定义生图家族实时清单：智慧模型、图片 5.0 Lite、专图模型、图片 5.0 Pro 等 + 提示词润色）、批量生图玩法（批量生图/批量改图/批量替换/主图复刻/姿势套图/批量译图）、AI 生视频（模型清单实时读取线上目录，含 Seedance2.5、Seedance2.0、阿里wanx3.0、MiniMax H3、全能电商2.0、Happy Horse、可灵3.0 Omni、Viduq3-turbo 等多模型，时长 | |
| 1688 商品图、主图套图、详情图、活动图生成 | LinkPix 帮助1688批发商、源头工厂、B2B运营通过青虎AI完成“1688商品图”：支持生成工厂风格主图、工业风白底图、参数图、细节拆解图、大货实拍风格图、多SKU组合图、带水印保护图。可调用Nano Banana 2 、Nano Banana 2 Pro等大模型，利用精准的材质还原和局部重绘能力，展现产品的供应链实力与价格优势。适用于1688批发、淘分销、跨境采购等B2B电商场景。Use this skill for 1688商品图, 工厂图, 白底图, 参数图, 细节图, 多SK | |
| AI商品广告大片 | TVC生成 | 电影级广告 | 品牌宣传片 | LinkPix 快速生成电影级商品广告视频：基于物理渲染的光影场景、细腻画面质感，适合品牌宣传与高端商品展示。当用户要求做广告大片、品牌宣传片、电影感商品视频、高级感 TVC 时必须触发。关键词：LinkPix、qhkit、广告大片、品牌大片、TVC、宣传片、电影级视频、质感视频、商品广告、品牌质感、高端视频。 | |
| 亚马逊 商品图、主图套图、详情图、活动图生成 | LinkPix 帮助亚马逊卖家、跨境电商美工、外贸团队通过青虎AI完成“亚马逊商品图”：支持生成亚马逊标准纯白底图、主副图（附场景图）、A+页面图、对比图、卖点图、多语言图。可调用GPT Image 2、Seedream 5.0等大模型，严格把控合规性、高清尺寸和原生质感，适配美国、欧洲、日本等不同站点的审美要求。适用于Amazon、Amazon Prime、Amazon Vine等平台视觉营销。Use this skill for 亚马逊商品图, 白底图, 主副图, A+页面, 卖点图, | |
| 电商背景替换 | 换背景 | 一键替换背景 | 场景合成 | LinkPix 智能识别商品主体，一键替换图片背景，生成不同风格的营销场景图，无需 PS。当用户要求给商品图换背景、替换场景、白底图换成场景图、把商品放到某个场景里时必须触发。关键词：LinkPix、qhkit、换背景、更换背景、背景替换、场景替换、白底换场景、商品换背景、营销场景图、免PS。 | |
| AI电商服装换色 | 服装换色 | 换颜色 | SKU换色 | LinkPix 一键生成服装的不同颜色版本，保持版型、材质及光影一致，无需重新拍摄即可完成 SKU 色卡图制作。当用户要求服装换色、出其他颜色版本、SKU 配色图、色卡图时必须触发。关键词：LinkPix、qhkit、服装换色、换色、改颜色、SKU图、色卡、配色版本、多色版本、免拍摄。 | |
| 电商详情图生成 | 详情页长图 | 卖点图 | 高转化详情 | LinkPix 根据商品图自动生成详情页图片套图，整合卖点、场景、参数及营销内容，快速制作高转化详情页。当用户要求生成详情图、详情页、长图、产品介绍图、卖点图时必须触发。关键词：LinkPix、qhkit、详情图、详情页、长图、详情页套图、卖点图、产品介绍图、高转化详情页、A+页面。 | |
| 电商详情页复刻 | 详情页模仿 | 高转化设计 | 竞品详情 | LinkPix 智能分析优秀商品详情页设计，用你的商品快速生成同类型布局及视觉风格的详情图，提高详情页制作效率。当用户要求照着某个详情页做、对标竞品详情页、复刻详情页布局风格时必须触发。关键词：LinkPix、qhkit、详情页复刻、对标详情页、竞品详情页、布局复刻、风格复刻、详情页模仿、同款版式。 | |
| 抖音小店 商品图、主图套图、详情图、活动图生成 | LinkPix 帮助抖音小店商家、短视频操盘手、直播团队通过青虎AI完成“抖音小店商品图”：支持生成抖音主图、短视频封面、直播间切片图、种草笔记图、营销活动图、高饱和度吸睛图、引导点击图。可调用Nano Banana 2 、Grok Image 2.0、GPT Image 2等大模型，快速抓住短视频平台用户的眼球，适配抖音商城“货找人”的推荐算法特性。适用于抖音、抖音极速版、火山小视频等短视频电商平台的商品视觉优化。Use this skill for 抖音小店商品图, 抖音主图, 短视频封 |
13,601–13,650 of 108,824