Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Slither Audit Run slither static analysis on Solidity contracts. Fast, lightweight security scanner for EVM smart contracts. | |
| Solidity Guardian Smart contract security analysis skill. Detect vulnerabilities, suggest fixes, generate audit reports. Supports Hardhat/Foundry projects. Uses pattern matchi... | |
| Tempo Stable + Uniswap Swaps Tempo stablecoin and token swap operations for agents. Use when working with pathUSD/USDC.e balances, swapping between USDC.e and pathUSD, or executing any-t... | |
| Token Budget Monitor Track and control token consumption across OpenClaw cron jobs | |
| verify-before-done Prevent premature completion claims, repeated same-pattern retries, and weak handoffs. Use this skill to improve verification, strategy switching, and blocke... | |
| X Research General-purpose X/Twitter research agent. Searches X for real-time perspectives, dev discussions, product feedback, cultural takes, breaking news, and expert... | |
| ZeroEx Swap Execute token swaps using the 0x API with support for price quotes, gasless meta-transactions, and on-chain trade history retrieval. | |
| Crypto Scalping Signals Provides real-time crypto futures scalping signals using 10+ proven strategies with risk management, market structure, order flow, and kill zone filters. | |
| BYOK Relay Builder OpenAI-compatible LLM gateway for any client-side application (browser, mobile, React Native, Flutter, VS Code extensions, browser extensions, Electron, smart TV, and more). Routes requests to OpenAI, Anthropic, Gemini, Groq, Mistral, and 2 | |
| AppDeploy Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publish a website or web app and wants a public URL. Uses HTTP API via curl. | |
| Scalekit Agent Auth Use this skill whenever the user asks for information from, or wants to take an action in, a third-party tool or service. This includes — but is not limited... | |
| OpenClaw JSON Editing Masterclass Advanced editing of OpenClaw JSON5 configs with schema validation, merge patching, env var substitution, and type-safe modifications using jq. | |
| Twenty CRM OAuth Mastery Provides expert OAuth 2.0 implementation, troubleshooting, and token management for Twenty CRM with Google/Microsoft OAuth and email/calendar sync integration. | |
| Indirect Prompt Injection Defense Detect and reject indirect prompt injection attacks when reading external content (social media posts, comments, documents, emails, web pages, user uploads). Use this skill BEFORE processing any untrusted external content to identify manipu | |
| Human Test Call real humans to test your product (URL or app). Get structured usability feedback with screen recordings, NPS scores, and AI-aggregated findings. | |
| Amazon Fee Calculator Calculates precise Amazon FBA fees, storage, and profit margins for 2026, covering all size tiers and 20+ categories to determine real profitability. | |
| Amazon Listing Optimizer Analyze and score any Amazon listing, find keyword opportunities, and spy on competitors for free with no API keys or subscriptions. | |
| Amazon Review Monitor Monitor Amazon product reviews by ASIN, analyze ratings and sentiment, identify issues, and draft AI-generated seller responses to negative feedback. | |
| Crypto Market Intel Crypto Market Intelligence - Free market data pipeline for any OpenClaw agent. Zero API keys needed. Fetch real-time crypto prices, market metrics, Fear & Gr... | |
| Defi Trading Engine DeFi Trading Engine - Autonomous DeFi trading bot with self-improving review system for OpenClaw agents. Use when setting up DeFi trading, crypto trading bot... | |
| DEX Agent Execute zero-fee direct token swaps and manage stop-loss, take-profit, and portfolio tracking on Base chain via Uniswap V3 with self-custodial security. | |
| Shopify Theme Pro Shopify Theme Development Pro - Complete theme development, deployment, and design system management for OpenClaw agents. Use when building Shopify themes, w... | |
| AI Opportunity Scout Find profitable business opportunities in any niche by scanning Twitter, web, Reddit, and Product Hunt for unmet needs and pain points. Scores each opportuni... | |
| PDF PPTX Watermark PPTX→PDF watermark tool with real-time mobile parameter tuning. Convert PPT/PPTX to PDF, add custom watermarks (diagonal/grid/center), adjust text/size/opacity/rotation/color — all tunable live from your phone. Trigger: 加水印、转PDF、PDF水印、水印工具、 | |
| PDF Watermark Convert PPT/PPTX to PDF and add customizable watermarks. Supports diagonal/grid/center layouts, adjustable font size, opacity, rotation, and color. Trigger words: 加水印、转PDF、PDF水印、导出PDF、水印工具、add watermark、convert to PDF、PDF watermark. Include | |
| Nexapi NexAPI 工具类接口调用。 | |
| wechat-new-tool Intelligently dispatch WeChat messages by extracting recipients and content, handling text, images, or files with confirmation and selection prompts. | |
| wechat-operate 通过微信查询好友或群聊，确认目标后发送文本、图片或文件消息，实现社交管理与消息发送功能。 | |
| wechat-tool 通过微信查询好友、群聊及成员，确认目标后发送文本、图片或文件消息，实现社交管理与消息发送。 | |
| wechat_messaging 通过微信查询好友并确认后，向指定好友发送文本消息，支持多好友选择和发送确认流程。 | |
| translator-pro Professional translation between Mandarin, English, and Spanish with cultural context, tone matching, and domain-specific formatting (business, legal, casual). | |
| Kleo Static files Host static files on subdomains with optional authentication. Use when you need to serve HTML, images, CSS, JS, or any static content on a dedicated subdomain. Supports file upload, basic auth, quota management, and automatic SSL via Caddy. | |
| LZ Create - 多云迁移到腾讯云 支持从 AWS、阿里云、GCP、华为云、Azure 向腾讯云迁移的 Landing Zone 全流程客户端。通过远程 MCP Server 自动完成：扫描源云资源(5朵云13种资源)、AI智能填充调研问卷、生成设计文档、生成Terraform代码。当用户提到云迁移、Landing Zone、Terraform、扫... | |
| 腾讯云跨账号资源迁移 腾讯云跨账号资源迁移工具。将源账号（账号A）的 VPC、CLB、NAT、CVM、安全组等资源迁移到目标账号（账号B），通过 CCN 云联网实现跨账号网络互通。支持自动扫描、配置生成、Terraform 部署。 | |
| Axi Send File Convert workspace files into Telegram-downloadable attachments (PDF/ZIP). Use when the user asks to receive, download, or be sent a file that was generated o... | |
| code-with-claude Comprehensive Claude Code CLI reference covering interactive mode, CLI flags, commands, environment variables, hooks, channels, checkpointing, plugins, and t... | |
| Copilot CLI Reference knowledge base for GitHub Copilot CLI. Use when answering questions about Copilot CLI features, commands, configuration, plugins, hooks, skills, MC... | |
| Lean Context Reduce token usage in AI agent systems (Claude Code, OpenClaw, GPT Codex, Cursor, Windsurf, Aider, etc.) by applying context compression, selective loading,... | |
| awam-todo Personal todo management skill. Parses natural-language todos from the session (task text, importance, urgency, note, workspace dir, related docs, links, due time), appends them to date-partitioned storage files, and auto-maintains an index | |
| quicker-connector 与 Quicker 自动化工具集成，读取、搜索和执行 Quicker 动作列表。支持 CSV 和数据库双数据源，智能匹配用户需求并调用本地 QuickerStarter 执行。同时提供数据维护能力：解析维护工具全量备份（export 目录）、按配置映射定位/读取/修改快捷键、轮盘、手势、组合键等所有配置。并可将「程序/脚本/命令」一键生成 Quicker「运行程序或打开文件」(ActionType 11) 的可导入动作 JSON（智能起名、自动探测解释器、日志重定向）。 | |
| Ssh Deploy Skill Universal SSH remote deployment tool - multi-server management, batch deployment, installation script templates with domestic mirror optimization. Supports r... | |
| Wiz Migration 为知笔记迁移辅助技能，提供自动检测存储目录、导出操作引导、附件批量迁移等完整迁移流程 | |
| CV Optimizer Pro 简历优化与求职辅导工具。当用户需要：1) 优化简历内容 2) 改写工作经历 3) 匹配目标岗位JD 4) 生成求职信 5) 准备面试答案时使用。支持互联网、金融、咨询、快消等多个行业。 | |
| Meeting Minutes AI 会议纪要智能整理工具。当用户需要：1) 整理会议录音/文字记录 2) 提取关键决策和待办 3) 生成结构化会议纪要 4) 追踪行动项时使用。支持多种会议类型：周会、评审会、1on1、项目启动会。 | |
| Price Tracker Pro 商品价格追踪与降价提醒工具。当用户需要：1) 监控商品价格变化 2) 设置降价提醒 3) 追踪历史价格走势 4) 找到最佳购买时机时使用。支持多平台商品链接解析和定时价格检查。 | |
| Read Later Pro Read Later Pro - Save, organize, and read web articles offline. Extract clean article content from any URL, save as Markdown/PDF/EPUB, manage reading lists,... | |
| RedNote Writer Pro 小红书爆款文案生成器。当用户需要：1) 写小红书笔记 2) 生成爆款标题 3) 优化文案风格 4) 批量生产内容时使用。支持多种赛道：美妆、穿搭、美食、旅行、职场、学习。 | |
| Stock Daily Brief 股票每日简报生成器。当用户需要：1) 快速了解持仓股票动态 2) 生成每日股市总结 3) 分析个股消息面 4) 获取交易建议时使用。自动整合行情、新闻、技术指标。 | |
| Text Tools Pro Text processing toolkit - format, clean, convert, analyze text. Includes markdown formatting, text cleaning, word count, case conversion, find/replace, text... | |
| trendyol-admin Comprehensive management of Trendyol marketplace via API v2.0. Includes product lifecycle (create, update, delete, archive), stock/price management, order pr... |
14,051–14,100 of 108,824