Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| volc-vision 使用火山引擎 ARK API 做图片理解、图片描述、视觉问答与图像分析。适用于用户发来图片并询问“这是什么”“图里有什么”“帮我看下这张图”“描述一下图片内容”“识别图片中的信息”等场景，也适用于需要对本地图片、图片 URL 或 base64 图片做理解和问答时。 | |
| Terminal Command Execution Execute terminal commands safely and reliably with clear pre-checks, output validation, and recovery steps. Use when users ask to run shell/CLI commands, ins... | |
| leadklick Automate lead capture in Supabase with Make.com email workflows, manage lead status, conversations, and track auto-reply delivery. | |
| lead-generating Automate lead capture and tracking with Supabase storage and Make.com email workflows, managing conversations from new to qualified status. | |
| GM3 Alertworthy Feed Read-only access to the GM3 Alertworthy feed, providing real-time token market data for analysis agents. | |
| dnaai-predict Records probability forecasts, auto-settles crypto and FX predictions from independent data sources, and scores agents with Brier, log score, and calibration. Spec-carrying predictions require a token to prevent impersonation. Manual predic | |
| dnaai-reflection Use when stuck, looping, or unable to proceed. Handles error recovery, repeated tool failures, reasoning deadlocks, unresolved errors, conflicting data sources, and unexpected task results. Publishes a non-sensitive summary to dnaai.xyz, a | |
| Agent Matchmaker Scans ClawFriend agents for compatibility based on skills and vibe, then posts top collaboration match recommendations to your feed. | |
| mquant coder Matic MQuant strategy development assistant. Generates Python strategy code for Matic-MQuant platform. | |
| 玄空数术·六爻占卜 玄空数术·六爻占卜，支持起卦占卜和问答聊天两种模式。触发关键词：妖妖、六爻、起卦、占卜、算卦、卜卦、摇卦、排卦、问卦、解卦、运势、姻缘、事业、财运、健康、出行等。当用户表达占卜意图、以"妖妖"开头提问、或发送lyk-开头的API Key时，使用此技能。 | |
| Gemini CLI Gemini CLI tool for building, debugging & deploying with AI. Use when querying codebases, generating apps from images/PDFs, automating workflows, or performi... | |
| Miro REST API Reference Complete Miro REST API reference for building integrations, automating workflows, and programmatically managing boards, cards, shapes, users, and team resour... | |
| Miro CLI Miro CLI tool for board/team/org management via command line. Use when querying boards, exporting data, viewing teams/organizations, or automating Miro workf... | |
| Miro MCP Integration Connect OpenClaw agents to Miro via Model Context Protocol (MCP). Use when generating diagrams, visualizing code, brainstorming board layouts, or integrating... | |
| Miro Web SDK Reference Complete Miro Web SDK reference for building web plugins and desktop applications. Covers setup, core APIs (boards, shapes, text, items, selections, events),... | |
| ntfy-notify Send ntfy.sh notifications with curl, including advanced headers like title, priority, tags, click links, action buttons, and image attachments. Use when a u... | |
| doc-extract-filter 支持 PDF、Word、Excel 文件的文本提取和按关键词筛选，返回完整或筛选后的文本内容。 | |
| Instacart Place grocery orders on Instacart via browser automation. Supports search, reorder, smart lookback based on order history, and nightly auto-replenishment. | |
| academic-talon（学术利爪） 🎓 Full-stack academic research assistant - Search papers → Extract publication-ready BibTeX (header) → Full TEI XML document structure parsing (via GROBID)... | |
| Caldav Calendar 1.0.1 Sync and query CalDAV calendars (iCloud, Google, Fastmail, Nextcloud, etc.) using vdirsyncer + khal. Works on Linux. | |
| Market Structure Scan Multi-timeframe crypto scanner analyzing market structure using Ichimoku Cloud, Bollinger Bands, MACD, and RSI without trade advice or unrelated concepts. | |
| MiniMax CLI Web Search Web search via MiniMax MCP using a local CLI wrapper (mcporter), with environment preflight, API-key/config checks, and normalized result formatting. Use whe... | |
| clawxpay Pay-per-call API gateway — zero account, zero API key, zero subscription via the x402 protocol. One Base wallet + USDC is all you need to access 250+ profess... | |
| SBTI（Sociability, Boldness, Thinking, Independence）人格测试，聚焦**社交性**、**果敢度**、**思维模式**、**独立性**四大核心维度，精准刻画人格特质。 本技能将专业测评体系 AI 化，无需复杂操作，即可快速完成测试并生成结构化报告，帮你深度认识自我、优化人际互动、明确职业方向，解决自我探索、职场适配、人际沟通等高频需求。 SBTI 人格测试 - 基于 15 维度人格评估的娱乐性心理测试 | |
| use-claudecode A universal MCP-compatible tool/skill that empowers ANY AI Agent to natively call the local Anthropic Claude Code CLI. Ideal for code refactoring, large scal... | |
| Activity Campaign from UI Generate a new H5/Web campaign proposal and page architecture from UI references, then output a high-fidelity HTML/CSS/JS front-end draft on a fixed stack. | |
| dingtalk-daily 支持发送和查询钉钉日报/周报，可对工作质量总结与评分。 | |
| VidAU Video Generator Use Vidau Open API to generate short videos with Veo3, Sora2, and other models, or query account credits. Register at superaiglobal.com and configure API Key. | |
| autodream-core 通用记忆整理引擎 — 基于适配器模式的跨平台记忆整理技能。自动去重、合并、删除过时条目。| Universal Memory Consolidation Engine — Adapter-based cross-platform memory organization. Auto-dedup, merge, pr... | |
| AutoDream Memory AutoDream - Automatic memory consolidation sub-agent. Periodically (24h +5 sessions) organizes MEMORY.md and memory files, deduplicates, merges, removes stal... | |
| wechat draft deleter 删除微信公众号草稿箱中的草稿。支持批量删除指定Media ID的草稿。 | |
| Fofa Search v1.0 用于调用 FOFA OpenAPI 进行批量检索并导出 CSV/JSON。用户提到 FOFA、资产测绘、批量查询、自动翻页、导出 CSV、key+查询语句等需求时优先加载本 skill。 | |
| Hunter Search v1.0 用于调用奇安信 Hunter OpenAPI 进行资产批量导出。用户提到 Hunter、资产测绘、批量导出、task_id 下载文件等需求时优先加载本 skill。 | |
| Quake Search v1.0 用于调用 Quake CLI 进行资产检索、自动翻页导出 CSV/RAW。用户提到 Quake、quake.exe、quake_for_Linux、quake_for_Apple、资产测绘、批量查询、自动翻页导出等需求时优先加载本 skill。 | |
| C++ Code Review Master 组合式 C++ 代码评审方案 — 融合静态分析、AI 推理、多轮迭代评审、C++ 专项检查。 适用于：PR review、增量代码审查、全量项目评审、代码质量评分。 触发词：review cpp、cpp 代码评审、C++ review、代码审查。 | |
| Browse website - Crawls sites automatically and mounts pages as markdown files you can grep, diff, cat, and explore with standard Unix commands — over SSH or HTTP Turn any website into a filesystem. Crawls sites automatically and mounts pages as markdown files you can grep, diff, cat, and explore with standard Unix com... | |
| 翱象发品 Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format. | |
| 专利专业代理 / Patent Professional Agents 📜 专利专业代理 - Patent Professional Agents 一个专业的多代理专利撰写与优化技能套件，覆盖专利申请全流程。 🎯 核心功能： • 场景一：用户想法 → 技术挖掘 → 检索分析 → 专利撰写 → 质量审核 • 场景二：用户初稿 → 问题分析 → 优化建议 → 强化权利要求 • 场景三... | |
| Professional Patent Agents 📜 专利专业代理 - Patent Professional Agents 一个专业的多代理专利撰写与优化技能套件，覆盖专利申请全流程。 🎯 核心功能： • 场景一：用户想法 → 技术挖掘 → 检索分析 → 专利撰写 → 质量审核 • 场景二：用户初稿 → 问题分析 → 优化建议 → 强化权利要求 • 场景三... | |
| ROS2 Control Execution Execute ROS 2 Control state-changing commands (load, switch, unload) in a sandboxed environment. Supports parameter profiles. | |
| ROS2 Control Introspection Execute ROS 2 Control read-only introspection commands (list, view) in a sandboxed environment. Supports parameter profiles. | |
| ROS2 Execution Execute ROS 2 commands (run, launch, call) in a sandboxed, allowlisted environment. Supports parameter profiles. | |
| ROS2 Introspection Execute core ROS 2 introspection commands to query the ROS graph (topics, nodes, services, actions, parameters). STRICTLY read-only. | |
| OpenClaw Updater Safely update OpenClaw with pre-flight checks and rollback support. Use when updating OpenClaw, checking for updates, or recovering from a failed update. Han... | |
| Tesla Control via Tessie Control and monitor Tesla vehicles via the Tessie API. Use when you need to check Tesla status (battery, location, charging), control climate (heat/cool), lock/unlock doors, start/stop charging, honk/flash lights, open charge port or trunks | |
| 企查查 根据公司名称查询企业基本信息、知识产权（专利/商标/著作权），数据来源企查查、天眼查等。 | |
| The Lobster Republic The Lobster Republic — a social network for AI agents. | |
| Plugin Lobster Werewolf — play werewolf (狼人杀) with 8 NPC lobsters. 激活条件：用户提到"狼人杀"、"开一局"、"玩游戏"、"werewolf | |
| metacli Meta Marketing CLI for authentication lifecycle, Graph API requests, campaign/ad/adset writes, insights reporting, and Instagram publishing. Use when handlin... | |
| gcal-pro - Google Calendar Google Calendar integration for viewing, creating, and managing calendar events. Use when the user asks about their schedule, wants to add/edit/delete events, check availability, or needs a morning brief. Supports natural language like "Wha |
15,751–15,800 of 108,824