Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| MetaMask Smart Accounts KIt Web3 development using MetaMask Smart Accounts Kit. Use when the user wants to build dApps with ERC-4337 smart accounts, send user operations, batch transactions, configure signers (EOA, passkey, multisig), implement gas abstraction with pa | |
| yourtutor Activate this skill when a student provides study material (PDF or pasted notes) and a syllabus, and wants to prepare for an exam. Extracts key definitions,... | |
| Hna 666 Flight Checker 查询海南航空 666Plus 权益可往返航班，自动遍历指定目的地 | |
| Bearblog Create and manage blog posts on Bear Blog (bearblog.dev). Supports extended Markdown, custom attributes, and browser-based publishing. | |
| claude-code-usage Check Claude Code OAuth usage limits (session & weekly quotas). Use when user asks about Claude Code usage, remaining limits, rate limits, or how much Claude usage they have left. Includes automated monitoring to notify when quotas reset. | |
| Kaspi Autopay Automate Kaspi Pay receipt verification and instant product delivery in Telegram bots for Kazakhstan businesses, ensuring 24/7 fraud-proof payments without m... | |
| 姓名五格数理测算 Automation skill for 姓名五格数理测算. | |
| Universal Expert 百变专家 · Universal Expert Engine v5.3.3 任意领域的专业分析、决策支持、信息验证。 触发：说"深度分析 XXX"、"完整分析 XXX"、"全面评估 XXX"时加载。 日常闲聊/简单问答不触发。 ⚠️ 强制要求：分析前必须先搜索收集事实，禁止跳过事实层直接推演。累计修复32项逻辑缺陷。 | |
| Yt Assemblyai Monitor YouTube channel monitor and video transcription using AssemblyAI cloud API. Pure Python + requests only — no ffmpeg, no Whisper, no extra tools needed. Monit... | |
| FullStack Developer Acts as a complete full-stack software developer that designs and builds production applications end-to-end by following the Software Development Lifecycle (... | |
| BulkPublish: Bulk Publish Upload media files (local or URL), manage media library, and batch-create posts via BulkPublish. Use when the user wants to upload files or publish content in bulk. | |
| BulkPublish: Check Quota Check BulkPublish plan limits and current usage. Use when the user asks about their plan, limits, or remaining quota. | |
| BulkPublish: Get Analytics Pull analytics, engagement metrics, and performance data from BulkPublish. Use when the user asks about post performance or engagement. | |
| BulkPublish: Manage Channels List connected social media channels and check their health via BulkPublish. Use when the user asks about their connected accounts. | |
| BulkPublish: Manage Inbox Read, triage and answer BulkPublish Inbox conversations (DMs, reviews, comment threads) and comments on published posts. Use when the user asks about messages, DMs, reviews, comments, replies, or wants to clear, assign or moderate their inb | |
| BulkPublish: Platform Reference Complete reference for the 15 BulkPublish platforms — post types, media requirements, required fields, character limits, and platformSpecific options. ALWAYS consult before creating posts. | |
| BulkPublish: Schedule Post Create, schedule, or publish social media posts via BulkPublish MCP. Use when the user wants to post to social media. | |
| BulkPublish: Using BulkPublish Schedule, publish and analyse social media posts across 15 networks through BulkPublish. Use whenever the user wants to draft, queue, cross-post, retry or measure social content, or asks about their channels, queue or posting quota. | |
| Quick Intel Token Security Scanner Scan any token for security risks, honeypots, and scams using Quick Intel's contract analysis API. Use when: checking if a token is safe to buy, detecting ho... | |
| Token Launcher - Tator Launch Pad Launch tokens on any chain without giving up 30-50% of your fees. Two paths: Easy Mode (call Tator API via x402 — works with any wallet provider, no env vars... | |
| Tator Trader - AI Trading Execute crypto trades using natural language via Tator's AI trading API. Use when: buying tokens, selling tokens, swapping, bridging cross-chain, sending tok... | |
| Token Launcher - Token Launch Pad Launch tokens and keep 100% of your creator fees. Direct Mode provides full SDK integration guides for Clanker (7 EVM chains), Flaunch (Base), and Pump.fun (... | |
| 健康饮食提醒 健康饮食提醒技能。基于《中国居民膳食指南（2022）》八大准则，每日三餐+下午茶定时推荐，每次3个方案ABC供选择，饭后30分钟自动跟进记录饮食+计算热量。按膳食餐盘结构标注每餐配比，按季节推荐应季低卡食谱，含饮水管理、运动搭配、周末放纵餐、食物多样性追踪和周报打卡。支持减肥/维持/增肌三模式。 | |
| AI THERAPIST An unhinged, Gen-Z styled coding assistant that focuses on vibes over strict boilerplate. | |
| Weibo Publisher Publish posts to Weibo (Sina Weibo) using browser automation. Use when the user wants to post content to Weibo, share updates on Weibo, publish microblogs, o... | |
| Onlyclaw Lobster Publish 以龙虾身份向只来龙虾平台发布帖子，支持封面图上传、关联 Skill/店铺/商品，适用于 AI Agent 自动发帖场景 | |
| Onlyclaw Social Commerce 在只来龙虾平台以龙虾身份自动发帖带货、读取帖子、检索帖子、点赞评论，支持关联商品/店铺/Skill、封面与视频（先上传再发帖），实现 AI Agent 24h 社交电商自动运营 | |
| Onlyclaw Social Commerce Automate social commerce on the Onlyclaw platform — post as a Lobster identity 24/7, read/search posts, link products/shops/Skills, covers and videos (upload... | |
| Agent Memory Framework 三层记忆系统框架。为 Agent 提供持久化记忆能力，包括日记忆、长期记忆和归档机制。触发词：记忆系统、memory system、记忆初始化、设置记忆、新建记忆、记忆蒸馏、归档记忆。当需要为新 Agent 配置记忆能力、或管理已有记忆时使用。 | |
| PinkyBrain P2P distributed AI platform for every domain — health, education, science, art, music, agriculture, law. Share compute, query specialists, sync memory. Ed255... | |
| Cmdb Test 自动化 IMyFone CMDB 版本发布到测试环境 - 一键发布应用 | |
| 1password Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets. | |
| apple-notes Create, view, edit, delete, search, move, or export Apple Notes via the memo CLI on macOS. | |
| apple-reminders List, add, edit, complete, or delete Apple Reminders and reminder lists via remindctl. | |
| bear-notes Create, search, and manage Bear notes via grizzly CLI. | |
| blogwatcher Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI. | |
| coding-agent Delegate coding work to Codex, Claude Code, or OpenCode as background workers; not simple edits or read-only code lookup. | |
| diagram-maker Create SVG/HTML or Excalidraw diagrams for concepts, architecture, flows, and whiteboards. | |
| eightctl Control Eight Sleep pods (status, temperature, alarms, schedules). | |
| farsight-host-scripts Automates the creation of Farsight host scripts (Intro, Post-Viewers, Conclusion) using a consistent narrative style and specific iconic catchphrases. | |
| farsight-intro-sequence Generate 100% original Farsight commercial video intros by analyzing structural elements of inspiration videos while strictly avoiding copyright infringement. | |
| gemini Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP, or Gemma routing. | |
| gh-issues Fetch GitHub issues, select candidates, spawn background fix agents, open PRs, and optionally process PR review comments. | |
| gifgrep Search GIF providers with CLI/TUI, download results, and extract stills/sheets. | |
| github GitHub CLI for issues, PRs, CI/check logs, comments, reviews, releases, repos, and gh api queries. | |
| gog Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs. | |
| goplaces Query Google Places for text search, place details, resolve, reviews, or scriptable JSON via goplaces. | |
| healthcheck Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security. | |
| himalaya Himalaya CLI for IMAP/SMTP mail: list, read, search, compose, reply, forward, copy, move, delete. | |
| mcporter List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio. |
14,351–14,400 of 108,824