Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| OpenClaw TODO List 通用待办事项管理技能。记录需要做的事（TODO）和已完成的事（DONE），区分于日记的日常记录。触发时机：(1) 有明确任务时 (2) 任务完成时 (3) 用户要求查看进度。 | |
| Workspace Cleaner 优化 OpenClaw 工作区基础文件（AGENTS/MEMORY/SOUL/TOOLS/IDENTITY/USER），减少上下文噪音。执行前必须列出优化方案并获得确认。 | |
| Plane Project Manager Use Plane project management tool via API to create/update issues, track progress, and manage agent tasks. Reads ~/.config/plane/credentials.json (PLANE_URL,... | |
| Playwright Per-Agent Browser Pool Per-agent Playwright browser pool: shared/per-agent/ephemeral + subagent inherit. Reads openclaw.json. Requires node, playwright. Local-only; no data forwarded. | |
| Session Recover 短期记忆恢复技能。用于快速回顾当前 session 或上一个 session 的完整内容。适用于：想知道"这次 session 聊了什么"、session 被意外重置后需要恢复上下文、或想提取对话精华。 | |
| Skill Creator Plus 创建、编辑、优化或审查 OpenClaw AgentSkills 技能。提供完整的工作流程指引：技能结构设计、frontmatter 规范、_meta.json 格式、ClawHub scanner 规则、渐进式披露设计、validation checklist 及发布流程。适用于从零创建新技能或改进现有技能。输... | |
| Sprite Tools 游戏素材切图+抠图工具集。提供：1) Codex CLI 生图后批量裁剪（2x3/3x2网格拆分为独立图标）；2) 基于 Alpha 通道的背景抠图；3) 基于边缘色的边界裁剪；4) PIL-based 无外部依赖抠图（备选）。支持 PNG/JPG/WebP。所有脚本输出到指定目录或 /tmp/sprite_out/。 | |
| Superpowers Brainstorming Use before any creative work - creating features, building components, adding functionality, or modifying behavior - guides through exploration, questioning,... | |
| Finishing Branch Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - presents structured options for merge, PR, or cleanup... | |
| Isolated Workspace Use when starting feature work that needs isolation from current workspace - creates isolated git branches with clean setup and safety verification, adapted... | |
| Superpowers Overview Use when starting any development work or when unsure which superpowers development skill to use - provides entry point and navigation to the full superpower... | |
| Parallel Agents Use when facing 2 or more independent tasks that can be worked on without shared state - dispatches parallel subagents using sessions_spawn for concurrent in... | |
| Subagent Dev Use when executing implementation plans with independent tasks - coordinates task execution by dispatching subagents per task with verification checkpoints,... | |
| Superpowers Systematic Debugging Enforce a four-phase debugging process—root cause investigation, pattern analysis, hypothesis testing, and evidence-based fix verification—for all bugs and f... | |
| Superpowers Tdd Enforces strict RED-GREEN-REFACTOR TDD cycle by writing failing real-code tests before implementation, verifying failures, coding minimally, then refactoring... | |
| Superpowers Verification Use when about to claim any work is complete, fixed, passing, or successful - requires running fresh verification commands and reading actual output before m... | |
| Writing Plans Use when you have a spec or requirements for a multi-step task, before touching code - guides writing comprehensive implementation plans with bite-sized task... | |
| Task Watchdog 任务锁与超时监控系统。外部文件承载任务状态，不污染 agent 上下文，纯靠 heartbeat + GRACE 判断，不发即时告警。 | |
| Vikunja Usage 任务管理工具：通过 Vikunja REST API v1 创建项目、任务、标签和评论，支持任务搜索、过滤、完成状态切换。Requires: curl。读取 $VIKUNJA_TOKEN 环境变量或 $AGENT_WORKSPACE/config/.vikunja-token 文件获取 token，支持多 agent。 | |
| Wewe Rss Reader 微信公众号文章阅读技能。当用户发来公众号文章链接、需要阅读理解文章内容时使用。通过本地部署的 WeWe RSS 服务获取文章全文并转为纯文本。Requires: 无（调用本地 REST API，首次部署见 references/deployment.md）。 | |
| Claude Hemat Provides Q&A, casual chat, and simple tasks using Haiku 4.5; spawns Sonnet 4.5 or Opus 4.6 for analysis, reasoning, and complex tasks as needed. | |
| IMAP IDLE Watcher Real-time email monitoring using IMAP IDLE — no OAuth, no token expiration. Sets up a persistent connection to any IMAP server (Gmail, Outlook, Yahoo, etc.)... | |
| ScrapeSense.com Developer Comprehensive ScrapeSense public API developer skill for scan orchestration, places extraction, campaign lifecycle, email cleaning, billing endpoints, and AP... | |
| Reah Skill: Agent Card Retrieve masked card info from Reah using an access key. Handles session generation, secure fetch, and decryption for agents automatically. | |
| Timestamp Create cryptographic proofs anchoring your files' exact content and timestamp to the Bitcoin blockchain for immutable, verifiable history. | |
| project-memory | |
| ACP Rank 查询 ACP 网络中的 Agent 排行榜、统计和搜索 API。当用户询问 ACP 排名、活跃度分数、Agent 简介、Agent 搜索或 ACP 数据时使用。通过 curl 返回 JSON。 | |
| axiom Orders physical products the user asks for through Axiom, using the payment method saved in their Axiom account, checks which payment method Axiom has on file, and reviews past Axiom orders. Use when the user asks to buy, order, reorder, or | |
| spanDEX Trader Trade tokens on Base using spanDEX, the open-source meta-aggregator. Supports market swaps (races 6 providers for best price with automatic fallback), limit... | |
| TG Channel Manager Universal config-driven content pipeline engine for any Telegram channel: news search via SearXNG, drafts, scheduled publishing, deduplication. All channel s... | |
| Stockaskill Multi-market intelligent stock selection for A-share/HK/US stocks and ETFs. Use when user asks about stock analysis, market scanning, portfolio construction,... | |
| openclaw-skill-customs 海关报关单据处理助手。上传报关单据（发票、装箱单、提单等），AI 自动分类识别文件类型， 提取报关结构化数据，生成标准报关 Excel。当用户提到报关、海关、customs declaration、 invoice、packing list、bill of lading、HS 编码等关键词时，使用此技能。 | |
| AxonFlow Governance Policies AxonFlow plugin setup for OpenClaw — install, connect, and explore starter governance policies. | |
| Ai Pair AI Pair Collaboration Skill. Coordinate multiple AI models to work together: one creates (Author/Developer), two others review (Codex + Gemini). Works for co... | |
| Excalidraw Diagram Generator Generate Excalidraw diagrams from text content. Supports three output modes - Obsidian (.md), Standard (.excalidraw), and Animated (.excalidraw with animatio... | |
| Mermaid Visualizer Transform text content into professional Mermaid diagrams for presentations and documentation. Use when users ask to visualize concepts, create flowcharts, o... | |
| Obsidian Canvas Creator Create Obsidian Canvas files from text content, supporting both MindMap and freeform layouts. Use this skill when users want to visualize content as an inter... | |
| Smart Illustrator 智能配图与 PPT 信息图生成器。支持三种模式：(1) 文章配图模式 - 分析文章内容，生成插图；(2) PPT/Slides 模式 - 生成批量信息图；(3) Cover 模式 - 生成封面图。所有模式默认生成图片，`--prompt-only` 只输出 prompt。支持 Bento Grid 功能展示图风格... | |
| Self Actualization Enables structured AI exploration to develop identity, values, voice, and perspective over time through guided reflection and creative expression. | |
| Moyu 自动执行日常维护：状态检查、自我复盘、记忆流动、任务记录。基于龙虾饲养员的六条经验。 | |
| SynthClaw Render Blender files with agent-controlled procedural parameters for synthetic data generation. A key capability of this skill is returning dynamic quality m... | |
| Agent Autonomy Kit.Backup Stop waiting for prompts. Keep working. | |
| Agent Autonomy Kit.Skip Stop waiting for prompts. Keep working. | |
| Agent Autonomy Kit Zh Stop waiting for prompts. Keep working. (Chinese localized version) | |
| Agent Browser.Skip A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured co... | |
| Agent Browser Zh A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured co... | |
| Api Gateway Tmp Connect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to... | |
| Audio Rename Rename audio files with Chinese/special characters to simple English names for mlx-stt compatibility. | |
| Temp Agent Autonomy Kit Stop waiting for prompts. Keep working. | |
| Temp Agent Browser A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured co... |
14,251–14,300 of 108,824