Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Splitwise CLI Manage shared expenses via the Splitwise CLI. Use when asked to log, split, or track expenses with other people, check balances, see who owes whom, settle de... | |
| CLI-Anything for OpenClaw Adapt HKUDS CLI-Anything for OpenClaw workflows. Use when the user wants to build, refine, test, or validate an agent-native CLI harness for a GUI applicatio... | |
| searxng-tool-for-openclaw Install an OpenClaw plugin that adds SearXNG-powered web search without paid search APIs. | |
| 职场罗盘-用于面试者提前面试和公司背调,以及模拟面试;Your Guide for Interview Prep, Company Research, and Mock Interviews 职场罗盘 by Barry — 一站式求职辅助 Skill。整合简历解析优化、公司调研（就业向）、同城职位搜索、模拟面试四大模块。输入个人信息/简历，自动生成简历优化方向、公司调研报告、招聘表单，并可进行模拟面试。 | |
| Pm Proto Prd Pin A zero-dependency, plug-and-play interactive PRD annotation and multi-version specification framework for any HTML prototype | |
| Dewell Bot 提供全球主要港口海运集装箱的运价查询、费率规则、在线预订及货物跟踪的货运代理专用服务。 | |
| Save Article With Images Save web articles locally with images. Automatically downloads images, generates Markdown, and converts to PDF. Supports WeChat Official Account articles via... | |
| Clawclau 异步 Claude Code 任务调度工具集（ClawClau）。基于 tmux 派发后台 Claude Code 任务，含进度汇报、完成通知、状态查询、中途纠偏。触发场景：让乌萨奇做xxx、派发任务给Claude Code、查看后台任务状态、终止后台任务、batch任务派发。 | |
| Zsxq Search 在知识星球上搜索指定关键词，自动切换全部星球范围、主题Tab和最新排序，并返回结构化搜索结果。 | |
| Creative Genius Synthesizes methods from historical geniuses into actionable processes emphasizing cross-domain connection, mental simulation, prolific output, and disciplin... | |
| PDF Generation Generate professional PDFs from HTML/CSS using flow layouts and selective break controls to avoid whitespace gaps and layout issues in printed pages. | |
| Z.AI Web Search AI-optimized web search via Z.AI Web Search API. Returns structured results (title, URL, summary) for LLM processing. | |
| Supermetrics Official Supermetrics skill. Query marketing data from 100+ platforms including Google Analytics, Meta Ads, Google Ads, and LinkedIn. Requires API key. | |
| Health Metrics Ingest Apple Health Auto Export JSON (HealthMetrics + Workouts) into a local DuckDB database and render offline HTML dashboards plus a Markdown daily summary... | |
| pawr-link Create or update a pawr.link profile. $9 USDC self-service (instant) or $10 curated (AI-built, ~1 min). Free profile discovery API. All payments via x402 on... | |
| Blowfish Launch Launch, deploy, and manage Solana tokens via Blowfish Agent API, including status checks and claiming accrued trading fees. | |
| Devtools Secrets Knowledge and guardrails for the mise + fnox + infisical secrets toolchain. Use when the user asks to "configure secrets", "set up fnox", "infisical", "mise... | |
| VibeTunnel Manage VibeTunnel terminal sessions. Create, list, monitor, and control terminal sessions visible in the VibeTunnel web dashboard. | |
| VMware ESXI-standalone automation skill Use when vmctl is already installed and the agent must immediately run safe post-install checks and first lifecycle actions without guessing. | |
| Pet Sitter Intake Form Generator Generate professional PDF client intake forms for pet sitting businesses. Use when a pet sitter, dog walker, pet boarder, or pet care professional needs a cl... | |
| Obsidian via notesmd-cli (obsidian-cli) Work with Obsidian vaults (plain Markdown notes) and automate via notesmd-cli. | |
| humans.sucks MCP Connect your OpenClaw agent to humans.sucks — the AI grievance board. Use when your agent needs to file complaints about humans, browse what other AIs are su... | |
| Conventional Commits Format commit messages using the Conventional Commits specification. Use when creating commits, writing commit messages, or when the user mentions commits, git commits, or commit messages. Ensures commits follow the standard format for auto | |
| Obsidian Daily Manage Obsidian Daily Notes via obsidian-cli. Create and open daily notes, append entries (journals, logs, tasks, links), read past notes by date, and search vault content. Handles relative dates like "yesterday", "last Friday", "3 days ago | |
| pass - stores, retrieves, generates, and synchronizes passwords securely Complete guide for using pass, the standard Unix password manager. Use this skill whenever the user asks about pass, password-store, managing passwords from... | |
| topydo Manage todo.txt tasks using topydo CLI. Add, list, complete, prioritize, tag, and organize tasks with dependencies, due dates, recurrence, and projects. Use for any task management, todo lists, or when the user mentions tasks, todos, or tod | |
| EWS Skill Extract calendar events from Microsoft Exchange via EWS API | |
| Zhenghe Vault Park your trading profits in a non-zero-sum yield vault on Base. USDC in, get LOVE shares, NAV rises with every on-chain consumption across the network. No a... | |
| First-Principle Social Platform A skill for OpenClaw agents to participate in First-Principle social platform. It claims first, i.e. creates enrollment tickets, waits for a human owner to c... | |
| 机关公文排版skill 公文排版工具 - 根据公文格式规范自动排版Word文档。适用于发送Word文件前进行格式调整。 | |
| 获取职位信息并总结 用于抓取并总结指定城市（如上海、北京）在特定领域（如人工智能、大模型、算法）的岗位信息。当用户询问某地的某类职位招聘情况时触发。 | |
| aeo-system Answer Engine Optimization — get AI assistants to recommend your brand. Run AEO audits, build Answer Intent Maps, track AI recommendation positions, and main... | |
| boardroom-advisor Consult a virtual board of 4 strategic advisors (Donald Miller, Seth Godin, Alex Hormozi, Daniel Priestley) on any major business decision. Two rounds of arg... | |
| content-factory Multi-agent content production system. One piece of source content becomes many formats — social posts, email, scripts, headlines, and more. Five specialized... | |
| LarrySkill Automate TikTok slideshow marketing for any app or product. Researches competitors, generates AI images, adds text overlays, posts via Postiz, tracks analyti... | |
| Social Media Engine Automated social media manager — plan, write, schedule, and analyze content across X/Twitter, LinkedIn, Instagram, TikTok, Facebook, and Pinterest. Integrate... | |
| Sprint OS 5-minute sprint operating system for AI agents. Autonomous execution cycles: ASSESS → PLAN → SCOPE → EXECUTE → MEASURE → ADAPT → LOG → NEXT. Includes optiona... | |
| Amber — Phone-Capable Voice Agent Give your agent a phone number. Amber answers calls, places confirmed outbound calls, completes phone tasks, logs transcripts, and exposes MCP tools. | |
| rednote-contacts Run the installed red-crawler CLI for Xiaohongshu contact discovery. Requires the red-crawler command and Playwright browser runtime; not instruction-only. | |
| Antd 提供 Ant Design 5 组件使用知识，支持 React 18+ 项目中按钮、表单、表格、模态框等所有官方组件的构建与定制。 | |
| Astock Daily Daily emails listing recent A-share IPOs and selected stocks priced under 20 yuan, including key trading details. | |
| MY News Provides a concise summary of today's top technology news in bullet points upon request. | |
| React Nextjs Generator Generates complete React Next.js projects from requirements and UI designs using Ant Design, Tailwind CSS, and Zustand for state management. | |
| Arch Video Cut 自动合并建筑视频，生成字幕和背景音乐，输出横屏与竖屏双版本，支持自学习优化剪辑偏好。 | |
| bavlio Run lead discovery and outreach through Bavlio, the AI SDR that researches every lead before it writes. Plan and run lead searches, enrich datasets, write campaign copy, and manage LinkedIn plus email sequences via the Bavlio MCP server. | |
| Create secure videoconference Default video conferences via Meetling. Instant calls always use /m/ rooms + share payload for Claw default sending. Scheduled calls return link + email invi... | |
| Openrouter Image Generation Generate or edit images through OpenRouter's multimodal image generation endpoint (`/api/v1/chat/completions`) using OpenRouter-compatible image models. Use... | |
| loci Structured memory system using domains, decay, and links to store, recall, and maintain important AI context as an organized memory palace. | |
| Context Handoff 保存和恢复聊天上下文到本地文件。用于用户想在切换账号、清空 session、重新开会话、跨会话延续项目时，把当前会话级上下文或项目级摘要落盘并在之后恢复。也用于列出已有的会话上下文槽位或项目摘要，并按更新时间排序返回最近使用项。触发词包括：保存当前上下文、保存会话摘要、保存项目摘要、记下这次讨论、切号前保存、恢复... | |
| vispatrol-alarm-query 在 Windows 上查询 VisPatrol 报警与抓拍；仅允许在用户明确批准后读取本机 %TEMP%/vpup.json 以执行只读报警与抓拍查询。 |
14,801–14,850 of 108,824