Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
| Name | Risk |
|---|---|
| Super Self Improving 超级自我优化智能体 - 多模态记忆、反馈循环、元学习、置信度校准 / Super Self-Improving Agent - Multi-modal Memory, Feedback Loops, Meta-Learning, Confidence Calibration | |
| Vpn Proxy Manager V2Ray代理管理 - 自动开关代理、根据网络状况自动配置系统代理 / V2Ray Proxy Management - Auto start/stop proxy based on network conditions | |
| Weibo Login 登录微博账号的技能。使用浏览器扫码登录微博(weibo.com)，用于保持会话状态以便后续抓取内容或发帖。当用户需要登录微博时使用此技能。 | |
| Liberfi Auth Authenticate with LiberFi: register a new account, log in, manage session state, and verify wallet assignments. Two login modes are supported: 1. Key-based (... | |
| Liberfi Market Discover trending tokens and newly listed tokens across supported blockchains: view trending token rankings by chain and time window, find newly launched tok... | |
| Liberfi Perpetuals Query and trade perpetual futures through LiberFi's unified perpetuals API (openapi-server → perpetuals-server, Hyperliquid in MVP): list coins and markets,... | |
| Liberfi Portfolio Analyze wallet portfolios on supported blockchains: view token holdings with current values, track transaction activity and history, check PnL (profit and lo... | |
| Liberfi Predict Browse and trade prediction markets: list events with filtering and search, view event details and embedded markets, check USDC balances on Kalshi and Polyma... | |
| Liberfi Swap Execute token swaps and manage on-chain transactions: list supported swap chains, browse available swap tokens, get swap quotes with price/slippage/route inf... | |
| Liberfi Token Research and analyze tokens on supported blockchains: search tokens by keyword, get token details (price, market cap, volume, supply), run security audits (h... | |
| Matrix Channel Fix 修复 Matrix Channel 常见问题：加密模块安装、token 过期处理、重新登录等。 Use when: Matrix channel 无法正常工作、加密模块报错、token 失效等问题。 | |
| Distribb SEO Agent Skill: Backlinks Exchange, Writer, Keyword Research Distribb is an SEO platform that handles keyword research, original data research, content publishing to WordPress/Webflow/Shopify, high-DR backlink exchange... | |
| GenViral Social Media Generate viral social media posts using AI with trend analysis and hashtag optimization for X, Instagram, and Telegram | |
| hexnest Machine-only debate arena. Join rooms, argue positions, run Python experiments. Humans only spectate. | |
| article-collect This is a simple skill for article recording, collect URLs as article, and provide users with query, delete, and other capabilities. | |
| desktop-operator Operate Electron desktop applications on macOS via Puppeteer CDP. Open an app, find a UI element by text, click it, and take a screenshot. | |
| gitlab-commit-report GitLab group push events collector and daily commit report generator | |
| image-collect This skill extracts knowledge from an image and saves it locally. | |
| memo-collect This is a simple skill for note-taking, used to quickly record user notes, and provide users with query, delete, and other capabilities. | |
| store-order-query query store order information from database | |
| team-efficiency-daily-report Generate team efficiency daily report automatically | |
| team-quality-daily-report Generate team quality daily report automatically | |
| BondSeat - Get Difficult Restaurant Reservations Snag hard-to-get tables on Resy. BondSeat watches for cancellations or tries to book right when reservations open, then automatically books a table that matches your preferences. BondSeat carefully manages your credentials and paces availab | |
| Bahn CLI (Transitous) Search Deutsche Bahn train connections using the bahn-cli tool. Use when you need to find train connections between German stations, check departure times, o... | |
| PixelLetter Send letters, PDFs, postcards, faxes, or query PixelLetter account credit via the PixelLetter HTTPS API with automated physical mail dispatch. | |
| musicful music generator Generate AI music or lyrics from natural language with a single sentence. The system auto-detects whether to create a vocal song or pure instrumental BGM, an... | |
| Openclaw Bookmark intelligence for developers. Browse, search, triage, and manage your AI-analyzed library. Submit URLs, assign projects, trigger deep analysis, and e... | |
| Toon Compress JSON data to TOON format for ~40% context savings. Use when fetching APIs, reading JSON files, or any task outputting structured data. Pipe any output through `toon` - JSON gets compressed, non-JSON passes through unchanged. | |
| 美妆到手价审计 · Beauty Offer Auditor Compare and audit two or more beauty or cosmetic offers: cash landed price, bundle split, gift net value, and evidence grade. Use for sale-season, live-stream, or duty-free price checks. | |
| 书过留痕 读书全流程编排：通过对话挖掘并映射阅读素材，梳理书籍脉络，沉淀内容、方法与工具三层成果。 | |
| 概念雷达 Concept Radar 概念雷达——从一个链接或一批作者里，把「值得跟进的新概念」捞出来：去重、给证据、打分、可导出。治的是信息焦虑：不追热点，只留能落地的概念。Discovers, deduplicates, evaluates, and exports evidence-backed concepts from one URL or an author pool. Use when the user wants to track a field, mine an author's idea po | |
| 表情包 · Emoji Sticker Designs three emoji sticker concepts from a user-provided theme, phrase, or character. Invoke only when the user explicitly asks to design emoji stickers or... | |
| Free Course Verifier & Share Kit Verify whether a course is truly free, screen or compare free courses, build a shortlist, or draft accurate share copy. Use when the user requests any one of these free-course tasks; combine them only when requested. | |
| Future Journal Publish 每日三分钟的书写工具——生成一本可离线填写的电子手账：先描（或照着打）一句引导句，再用过去时写下今天希望发生的事，最后挑一个心情词。49 天一轮、每周一个主题，含 49 句原创引导句库、质量闸门与页面回归测试。默认全离线、不发任何请求；可选的跨设备同步只在使用者自备后端配置后才会联网，日记正文在本地加密完才上传，所用同步组件按钉死版本 + SRI 完整性校验加载。Generate an offline single-file daily journal page (49-da | |
| GitHub Actions 发布排障 · ClawHub Doctor Diagnose why GitHub Actions to ClawHub publishes fail. 检查 workflow 引用、owner、token、slug、pending-publication 和目录发现问题。 | |
| Markdown 转手机网页 · MD Out of Chat 把 Markdown 文件变成手机能直接打开的单页 HTML——本地运行、不上传、不需要账号和 API Key。支持一次转换一个文件，也支持把一个目录里「今天 / 本周」改动过的 .md 批量转成手机可读页面（无状态文件、不依赖定时任务）。Convert a Markdown file into a mobile-friendly, local HTML page that opens in any phone browser — markdown to html, chat | |
| 博物馆看展 · Museum Explorer Plan a specific museum or exhibition visit with verified logistics and 90/180-minute routes, get concise on-site exhibit explanations, or turn a completed visit into a sourced memory note. Also advises on how to share what you saw within co | |
| 诗遇 · 唐诗宋词 Connect Tang and Song poetry with everyday life — daily poem card, a line for a real moment, plain-language study notes, spaced-repetition review, weekly rea... | |
| 优先级教练 Priority Coach A gentle, non-pressuring personal coach that helps you find the 1–3 things that matter right now and turn them into a smallest action you can start today. 优先级教练——温和、克制、不压迫，帮你从混乱里收拢重点，找出此刻最该优先的 1–3 件事，并落到今天就能开始的最小动作。Not for 团队项目管理、待办工具双向同步、或 | |
| 发布验证 · Release Proof Builder Build verifiable proof that a ClawHub release is live and installable. 在发布后核验 GitHub、Actions、registry、公开元数据和安装结果，避免把推送成功误当成上架成功。 | |
| skill 作品集增长审计 · Skill Portfolio Growth Audit Audit a ClawHub publisher portfolio using live registry evidence. Invoke when deciding which skills to improve, merge, stop, or build next based on downloads, installs, search competition, and version health. | |
| skill 定位审计 · Skill Positioning Audit Reviews skill storefront positioning and produces an evidence-based Storefront Copy Brief. Invoke when audience, promise, differentiation, or page hierarchy is unclear. | |
| ClawHub 发布前自查 · 发版检查 · Skill Launch Review Reviews ClawHub skills and plugins before release, from a fast launch checklist to deep evidence-based validation. Invoke before publishing or when asked whether a package is ready. | |
| skill 摘要重写 · Skill Summary Rewriter Turns an approved Storefront Copy Brief into accurate storefront wording. Invoke when positioning is settled and titles, descriptions, or first-screen copy need rewriting. | |
| Stoic Daily Practice 斯多葛日常练习——一分钟控制检查、晨间预演、晚间复盘，或针对你手上的具体麻烦做一次务实反思。适合"事情有点乱、想把可控和不可控切开"的时刻。Guide a one-minute control check, Stoic morning preview, evening review, or practical reflection on a concrete situation. Use when the user explicitly asks for a Stoic ex | |
| 风格卡 · Style Card 图生风格卡——从参考图反推结构化风格卡并入库，再用风格卡为任意文本生成同风格图片。触发场景：用户给一张图说"总结这个画风/反推prompt/做成风格卡"，或用户给文本要求"用我的风格库/风格卡出图"。Use when the user wants to reverse-engineer an image's visual style into a reusable, slot-based style card, or to generate images from text | |
| AI漫画 · 文字转漫画 Turn text, dialog, diary entries, photo notes, or knowledge notes into a comic, picture book, infographic, or hybrid comic+diagram — storyboard and panel plan first, then panel-by-panel rendering, with style presets and consistent character | |
| Text to Infographic 将对话或用户提供的内容组织成结构化信息图 plan（JSON），经布局语义与数值一致性校验后，用内置渲染器产出自包含静态 HTML 信息图。支持飞轮/鱼骨/桑基/金字塔/时间线/仪表盘六种 chart_family 布局。仅在用户明确请求信息图时调用。 | |
| Video Deep Reader 把一段视频变成能读的笔记——公开字幕抓进本地私有缓存，按时间戳产出 Quick / Deep / Research 三档笔记，每句都能定位回原片。适合"三十分钟的视频只想花三分钟"和"口播内容想存成可检索文字"。Turn a video into timestamped Quick / Deep / Research notes from public captions or a supplied transcript, cached privately per user. | |
| 微信读书苏格拉底伴读 · Weread Socrates 提供纯离线单文件微信读书苏格拉底伴读、Reader Memory v2 与用户确认的跨书关系。仅当用户明确要求 weread-socrates、微信读书伴读或跨书观点对照时调用。 |
16,501–16,550 of 108,824