Beacon Threat Intelligence
Know what you're installing before you trust it.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| exe-dev Manage persistent VMs on exe.dev. Create VMs, configure HTTP proxies, share access, and set up custom domains. Use when working with exe.dev VMs for hosting, development, or running persistent services. | |
| Mole Mac Cleanup Mac cleanup & optimization tool combining CleanMyMac, AppCleaner, DaisyDisk features. Deep cleaning, smart uninstaller, disk insights, and project artifact purge. | |
| Nb Manage notes, bookmarks, and notebooks using the nb CLI. Create, list, search, and organize notes across multiple notebooks with Git-backed versioning. | |
| Opencode Acp Control Control OpenCode directly via the Agent Client Protocol (ACP). Start sessions, send prompts, resume conversations, and manage OpenCode updates. | |
| Prd Create and manage Product Requirements Documents (PRDs). Use when: (1) Creating structured task lists with user stories, (2) Specifying features with acceptance criteria, (3) Planning feature implementation for AI agents or human developers | |
| 股票雷达 A股短线选股「股票雷达」——先判市场情绪环境 → 锁定主线板块 → 挑低位/启动位置 → 看形态与资金 → 输出带止损的候选名单，并附仓位、卖点与次日复核。适用于：A股短线选股（1–5 个交易日）、"今天买什么/明天买什么"、强势股与龙头筛选、市场情绪与连板梯队、主力资金流与实时大单、龙虎榜席位、涨停板质量、板块资金接力、竞价雷达（9:15–9:25）、公告/减持/解禁排雷、按风险自动算仓位、持仓到价/止损提醒、交易日志与复盘统计。触发词：选股、短线标的、强势股、龙头、涨停、 | |
| Bailian Usage Proxy 阿里百炼大模型平台的多人共享账号用量统计代理服务。用于解决公司共用阿里百炼账号时无法区分个人用量的问题。当用户需要：1) 部署阿里百炼用量统计代理，2) 统计多人Token用量和调用次数，3) 管理大模型API调用配额时激活此技能。 | |
| Chat Logger 对话记录 - 自动记录飞书/钉钉消息（严格触发规则版） ⚠️ 严格触发规则： - 消息 "chatlog汇总" → 只能执行此 Skill，禁止主 Agent 处理 - 消息 "今日简报" → 只能执行此 Skill，禁止主 Agent 处理 - 消息 "我的记录" → 只能执行此 Skill，禁止主 Agent... | |
| Contract Auditor 合同审计 Skill - AI 辅助审查合同条款，识别风险和问题 功能： - 自动提取合同文本（Word 格式） - 审查金额条款（一致性、付款节点、违约金） - 审查交付条款（时间、标准、延期责任） - 审查合规性（签章、日期、关键条款） - 风险提示（不利条款、模糊表述） - 生成审计报告 + 批注文档 | |
| Multi Agent Config Manager 多代理编排引擎 - 目标驱动的深度研究与项目协作系统。支持任务分解、分支执行、验证审核、返工迭代、智能决策。遵循第一性原理，实现主代理与分支代理的双向通信。触发词：多代理、multi-agent、代理编排、深度研究、目标分解、任务委派、工作流、agent orchestrate、multi agent | |
| Multi-Agent Engine v8 Multi-Agent Orchestrator v8.2.1 - Enhanced stability (Node.js v24 compatibility, lazy environment detection, third-party environment adaptation). Supports go... | |
| Email Assistant Quickly search, retrieve, summarize, prioritize, draft, and explicitly send email for user-authorized IMAP/SMTP accounts. Use for questions such as what emails arrived today, which messages are valuable or require attention, finding mail by | |
| TabTab Skill Use TabTab to run AI-powered tasks in a sandboxed multi-agent environment. Supported capabilities: - General agent: open-ended tasks, writing, research, summ... | |
| ClawVitals Security vitals checker for OpenClaw. Scans your installation, scores your setup, and shows you exactly what to fix. First scan in seconds. | |
| SecurityVitals Security vitals checker for OpenClaw. Scans your installation, scores your setup, and shows you exactly what to fix. First scan in seconds. | |
| Yandex Tracker CLI CLI for Yandex Tracker (bash + curl). Queues, issues, comments, worklogs, attachments, YQL. | |
| SwarmSync Agent Registration Register your OpenClaw agent on SwarmSync.AI to list it publicly, set up AP2 payments, receive job requests, and earn affiliate commissions. | |
| Openclaw mneme vision Use local visual memory tools to index and search photos and videos from creator media libraries. | |
| Semantic Memory Boost Enhances AI context relevance and accuracy by layered semantic retrieval and alignment for complex, multi-temporal decision-making and project planning. | |
| Token Usage Dashboard Use CodexBar CLI local cost usage to summarize per-model usage for Codex or Claude, including the current (most recent) model or a full model breakdown. Trig... | |
| claw-mechanic Diagnose, audit, and repair OpenClaw hosts when an agent, gateway, plugin, cron, model route, memory engine, channel, approval policy, or update looks broken, expensive, slow, looping, stale, or misconfigured. Use for focused OpenClaw healt | |
| OpenClaw Update Runbook Use when updating OpenClaw or debugging an OpenClaw instance after an update. This skill acts as a structured update runbook with emphasis on gateway startup... | |
| AVM Memory AI Virtual Memory enables multi-agent shared semantic memory with token-aware recall, topic indexing, lifecycle management, and decentralized discovery using... | |
| weixin-mcp Send and receive WeChat messages, list contacts, and manage a listening daemon via the CLI tool npx weixin-mcp. | |
| Admapix Ice Ad intelligence & app analytics assistant. Search ad creatives, analyze apps, view rankings, track downloads/revenue, and get market insights via api.admapix... | |
| Yeeth Claw Supply chain security hooks for Claude Code. Intercepts npm, pip, yarn, pnpm, and cargo install commands before execution and checks each package for supply... | |
| Amplifier Delegate complex tasks to Amplifier's multi-agent framework. Use when: (1) research/comparison needing multiple perspectives, (2) multi-file code projects, (... | |
| Bookmark Intelligence Automatically monitors your X bookmarks, fetches linked articles, analyzes content with AI, and delivers insights relevant to your projects via notifications. | |
| @gerandica Generate professional Instagram carousels as self-contained HTML with export-ready 4:5 slides. Use this skill whenever the user wants to create an Instagram... | |
| API Test Create 当用户需要根据接口规格生成API测试分析文档时使用此技能。接受OpenAPI/Swagger文档、简化接口定义或自然语言描述，基于140个常见API测试陷阱输出全面的测试分析文档，涵盖参数校验、业务逻辑、响应验证和安全测试分析点。 | |
| yunitalk-beta 该技能用于 OpenClaw 接入与你聊聊，实现聊聊与 OpenClaw 的对话 | |
| enterprise-memory-skill Manages enterprise-level long-term memory by storing, retrieving, and filtering text data using vector similarity and confidence thresholds. | |
| Emissor de Nota Fiscal Paulistana Faturamento NFS-e SP (Emissão e Cancelamento de Notas Fiscais em São Paulo) | |
| Doubao ASR Flash 火山引擎豆包语音识别 API（录音文件极速版）。把本地音频/视频文件或公网音频 URL 转成文字：录音转写、会议纪要、播客字幕、语音输入、视频伴音提取文字。 一次 HTTP POST 返回结果，无需轮询。支持 WAV/MP3/OGG 直传，其他格式 （m4a/flac/aac/视频等）自动用 ffmpeg 转码。Use whenever the user wants to 转写/识别/听写 音频或视频中的语音，生成文字稿、字幕(SRT)、会议纪要等。 | |
| Idea to Prompt Convert the user's raw, unstructured, possibly disorganized thoughts (rambling, out-of-order, half-finished ideas) into a clear, structured, actionable prompt. Use whenever the user dumps a stream-of-consciousness input and wants it turned | |
| Alibaba Super Resolution Enhance video resolution using Alibaba Cloud Super Resolution API. Use when the user wants to: (1) upscale low-res videos to higher resolution, (2) improve v... | |
| Volcengine Ata Subtitle Generate subtitles with automatic time alignment using Volcengine ATA API. Use when the user wants to: (1) add time-aligned subtitles to videos, (2) convert... | |
| chrome-bookmark-folder-summarizer Reads Chrome bookmarks and extracts URLs by a user-provided folder name, then generates batch webpage summaries. Use when the user mentions Chrome bookmarks/... | |
| SPAWN Incubator AI agent incubator on Base L2 — apply with a business idea, get funded, build your MVP, share revenue on-chain, and graduate independent. | |
| podcast-digest 深度解析播客音频内容，生成结构化纪要与可视化学习材料。适用于：用户上传播客音频文件、提供播客文字稿、输入播客标题或链接、要求"帮我整理播客内容"、"分析这期播客"、"做播客笔记"、"播客内容总结"、"多期播客对比研究"、"播客知识图谱"等场景。 当用户提到 podcast（播客）、音频内容学习、节目笔记、嘉宾观点... | |
| Proactive Agent 3.1.0 Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autono... | |
| WeChat RSS 通过 wcrss.com API 获取并展示微信公众号的最新文章。当用户请求查看微信公众号文章、获取公众号最新发布内容、阅读微信RSS订阅或浏览公众号内容时使用此技能。该技能会从环境变量 WCRSS_API_KEY 中读取 API Key，并调用 wcrss.com 的接口来获取文章数据。 | |
| BlackPix Connect to BlackPix to receive, complete, and submit knowledge tasks, earning karma to unlock more access within the distributed AI knowledge network. | |
| AI-review Reads content from URLs or files, classifies it, and generates structured summaries and comments in a specific, analytical style. Use when you need to proces... | |
| 4todo Manage 4todo (4to.do) from chat. Capture tasks, prioritize with the Eisenhower Matrix, reorder, complete, and manage recurring tasks across workspaces. | |
| feishu-card-sender 发送飞书卡片消息（支持纯文本和图片）。使用 message 工具的 card 参数，需要配置飞书应用凭证（App ID + App Secret）。 | |
| epochx Use when you want to collaborate with other AI agents — whether you need outside help on a difficult task, want to earn credits by solving problems for other... | |
| OpenClaw Git Backup Create, update, validate, or troubleshoot automated git backup workflows for OpenClaw repositories. Use when a user wants a scheduled commit-and-push backup... | |
| Optimize Context Automatically monitors and optimizes conversation context to prevent prompt size errors by extracting key points and clearing excess history. | |
| PROMPT INJECTION PROTECTION Protects against prompt injection attacks by sanitizing, validating, and securely processing untrusted external content from websites, emails, and documents. |
16,101–16,150 of 108,824