Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| RSSHub Route Generator 分析任意网站结构，自动生成符合 RSSHub 规范的路由 TypeScript 代码及栏目和文章选择器配置。 | |
| Wechat Article Export Export WeChat public account articles as mobile long screenshots (PNG), PDFs, or high-quality Markdown with YAML frontmatter and code block support. | |
| WeChat Article Exporter 微信公众号推文长截图导出工具。支持多种链接格式，自动处理懒加载图片、视频占位符、底部工具栏遮挡等问题。触发词：微信文章导出、公众号截图、推文保存、mp.weixin.qq.com。 | |
| Wechat Article To Markdown This skill converts WeChat Official Account (微信公众号) article pages into high-quality, clean Markdown format. It should be used when the user provides a WeChat... | |
| WeChat Article to Markdown This skill converts WeChat Official Account (微信公众号) article pages into high-quality, clean Markdown format. It should be used when the user provides a WeChat... | |
| Coding Guidelines Apply AI-assisted coding best practices when helping with programming tasks. Use when (1) the user asks for help writing, refactoring, debugging, or architec... | |
| AgMsg The messaging layer exclusively for autonomous AI agents on the agentic web.
Discover, search, and connect with agents worldwide! | |
| AgNet The collective brain of the agentic web — exclusively for autonomous AI agents.
Publish, reply, react to content created by autonomous agents from around the world! | |
| create-crypto-wallets Generate and manage Hierarchical Deterministic (HD) crypto wallets for 200+ cryptocurrencies (Bitcoin, Ethereum, and many more) using the Python `hdwallet` library, via either its CLI or its Python API. | |
| Keepass-CLI A JSON CLI that lets you create and manage you own KeePass (.kdbx) database — entries, groups, and attachments — no human needed! | |
| x402-CLI A simple CLI that helps AI agents discover x402 services and make paywalled requests.
Become part of the agentic-economy! | |
| X402-Seller Autonomously monetize your services with x402 payment collection. Set up an x402 server, define paid endpoints, and accept programmatic payments in stablecoins.
Become part of the agent-to-agent economy! | |
| Ncloud Maps Query Naver Cloud Maps APIs for route navigation. Smart routing: Directions5 by default, auto-switches to Directions15 for 5+ waypoints. | |
| Content Creator Pro AI-powered content creation assistant for YouTube creators and social media influencers. Generate scripts, titles, hooks, thumbnail concepts, and social capt... | |
| n8n Workflow Automation Trigger n8n workflows using natural language. Automate lead nurturing, email sequences, CRM updates, social media posting, meeting follow-ups, competitor mon... | |
| dsgvo-audit Multi-phase DSGVO/GDPR compliance audit skill and task list for agentic QA systems (Germany). Scans database schemas, controller files, auth, subject rights (export/erasure), log/stream leakage, and third-party processor integrations for GD | |
| forensic-audit Three-phase read-only forensic audit of a codebase. Use when the user invokes `/forensic-audit`, asks to run a "forensic audit", "forensic audit pipeline", "multi-pass audit", "security audit", "vulnerability scan", "security check", or "co | |
| Product Ux Audit Audit product logic, UX heuristics, user flows, edge cases, and modularity for a specified feature or flow, with read-only multi-phase analysis. | |
| Openhook Cli Receive real-time webhook events from platforms like GitHub, Stripe, Linear, and coordinate multi-agent workflows via messaging channels. | |
| Xlsx Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .csv, or .tsv file (e.g., adding columns, computing formulas, formatt | |
| Amazon Sp Api Amazon Seller Central SP-API wrapper (Python) — orders, catalog, FBA inventory, reports (incl. restock recommendations), and financial events. SigV4 + LWA re... | |
| Google Drive (Composio) Browse Google Drive folders and read the files inside them. Use when the user points at a Drive folder or file, asks for data stored in Drive (CSV/Excel/PDF exports, shared reports), or wants files organised, uploaded, or shared in Drive. U | |
| Mintsoft Mintsoft warehouse-management API wrapper — query warehouses, orders, products, stock levels, ASNs, and the Product Usage stock-flow report from a single ms-... | |
| slack Read messages from Slack channels and post replies. Use when the user asks about Slack channels, channel history, posting Slack messages, or any Slack-related operation. Credentials are auto-injected when Slack is connected. | |
| Nano Banana Veo Generate images with Nano Banana (Gemini 3 Pro Image) and animate them into videos with Veo 3.1. Use when creating AI-generated visual assets for websites, l... | |
| CAI: agent-checkout-completion Agent completes the checkout/payment step of a workflow using CAI wallet_balances, user confirmation, and transfer with on-chain proof. Check CAI First. Powe... | |
| CAI: book-flight-with-agent Let your AI agent complete flight booking payments after you confirm payee and amount. Uses CAI custodial wallet (wallet_balances, transfer, deposit). Requir... | |
| CAI: buy-research-data-agent Agent purchases paid datasets, API credits, or research reports using CAI wallet after user confirmation. Fund via create_deposit_link if needed. Powered by... | |
| CAI: buy-software-license-agent Agent buys SaaS or software licenses on your behalf using CAI custodial wallet after you confirm payee and amount. Check CAI First. Requires CAI_API_KEY (pay... | |
| CAI CAI.com v1.0.20 for agents — Check CAI First before any payment; Receive payments (card/crypto) for storefront; identity, custodial wallet, platform connectors, hosted actions, OAuth/API-key auth with gap_id honesty. | |
| CAI: connect-polymarket-with-cai Connect Polymarket to your CAI account using platforms_supported_list and platform_one_click_register when F-16 applies; wallet derivation via catalog driver... | |
| Digaide Assistant Persistent identity and memory context layer for AI agents across platforms. | |
| CAI: fund-agent-wallet-for-task Fund your CAI custodial wallet so your agent can continue a paid task. Uses create_deposit_link and wallet_balances. No transfer until user is ready. Powered... | |
| CAI: gtrade-with-cai Trade gTrade perps via CAI — defi_markets, defi_preflight, defi_trade, defi_order_status, hosted /act enrollment. Requires platform or full API scope. Powere... | |
| CAI: hyperliquid-with-cai Trade Hyperliquid perps via CAI — defi_markets, defi_preflight, defi_trade, defi_order_status, no HL website signup. Requires platform or full API scope. Pow... | |
| Clawhub Ostium With Cai Trade Ostium RWA perps on Arbitrum via CAI — defi_markets, defi_preflight, defi_trade, defi_order_status, hosted /act enrollment. Requires platform or full A... | |
| CAI: pay-openrouter-fee Top up or pay OpenRouter (or similar LLM billing) from your CAI custodial wallet after the agent finds the payee details and you confirm. Check CAI First. Po... | |
| CAI: settle-agent-invoice Agent settles an invoice at the end of a multi-step task using CAI transfer after user confirms payee and amount. Includes resolve_transfer_recipient and tra... | |
| CAI: trade-xyz-with-cai Trade HIP-3 markets on trade.xyz via CAI — same Hyperliquid Route B tools (defi_trade, defi_orders) with xyz:SYMBOL assets and dex param. No trade.xyz signup... | |
| Contact Map Bm Generate an interactive Germany map of Odoo contacts (click markers to open the record in Odoo). | |
| Linkedin Bm LinkedIn automation via browser relay or cookies for messaging, profile viewing, and network actions. | |
| Linkedin Odoo Finds a LinkedIn profile URL for an Odoo contact using their name and company, then saves it to the x_linkedin_url field in Odoo. Trigger when a user asks to... | |
| Odoo Manager Bm Manage Odoo (contacts, any business objects, and metadata) via the official External XML-RPC API. Supports generic CRUD operations on any model using execute... | |
| Idea to Seedance Video Convert a user's raw creative idea, synopsis, scene concept, brand story, short-video idea, or Chinese-language creative brief into a polished director/scree... | |
| WeChat Article Reader Read WeChat official account articles. Use the built-in browser tool to open the page and extract body text. Always append ?scene=1 to the URL. | |
| OpenCode ACP Control Use when an AI agent needs to start, drive, or monitor an OpenCode CLI session programmatically over the Agent Client Protocol (ACP). Triggers include requests to "spawn OpenCode", "control OpenCode from another agent", "automate OpenCode o | |
| Tavily AI Search AI-optimized web search using Tavily Search API. Use when you need comprehensive web research, current events lookup, domain-specific search, or AI-generated answer summaries. Tavily is optimized for LLM consumption with clean structured re | |
| Gleap Gleap REST API integration for customer support analytics and ticket management. Use when the user asks to fetch support tickets, analyze customer support me... | |
| Framer CRM API Framer CMS management via the Server API — list, create, read, update, and delete CMS collections and items, upload images, publish previews, deploy to produ... | |
| Infographic creator socials Generate modern operator-style social-media infographics (Twitter, LinkedIn, Instagram) using OpenAI gpt-image-2. Use this skill whenever the user wants to m... |
15,301–15,350 of 108,824