Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| origin-office 原生文档（docx/pptx）→ 可验证的对象——转换即语义事务。零依赖解析 docx 的章/条/段落/表格（合并单元格展开、勾选框保留）与 pptx 的幻灯片/形状/表格（占位符类型、gridSpan 合并），每处结构一个对象建成本象包，SHA-256 结构指纹入库，verify 可验证「包与源文件一致」（篡改即检出）。行业火力全在 PDF 扫描件（OCR 有物理误差），原生电子文档的无损结构化没人认真做——本象做「把字变成可验证状态的对象」。当需要把 docx/pptx | |
| origin-writer 百万字小说写作引擎——把长篇写作变成事务性写作。AI 每写一章提交一个语义事务（正文+状态变更），门禁逐条复核（禁区/伏笔状态机/正文对照）后才落盘。角色不会突然用上他不知道的信息，物品不会凭空易主，伏笔不会收了又埋。新会话秒恢复：state 一条命令拿到全部世界状态。当需要写长篇小说、续写长篇、维护小说世界观一致性、管理伏笔/人物状态/时间线时使用。 | |
| 论文配图 Paper Figure 可投稿的论文图：把「合规格、不被退稿」变成一条命令。期刊栏宽、最小字号、字体嵌入、色彩模式、300/600/1000 dpi、面板 a/b/c 逐条对着官方作者指南核过（每条带官方 URL 与核实日期）；结构图/流程图/机制图/对比图用代码排成矢量，数据图从你的真 CSV 出；本机免费跑硬校验（尺寸/字号/DPI/文字溢出/色盲），多 AI 低价会审只给「可执行的修改清单」。AI 出图只限概念示意/封面/TOC，并强制标注。当用户说「论文配图」「帮我画个架构图」「画流程图/机 | |
| 钢筋数量表核对 / Rebar Table Audit 从结构图纸（DWG/DXF）里找出设计方自带的“钢筋/材料工程数量表”（LINE 网格 + TEXT/MTEXT），还原成结构化表格，做 R001–R006 确定性算术核对（单根长×根数=总长、总长×单位理论重量=重量、行重量之和=表内声明合计等），输出 evidence.json、钢筋数量表.xlsx、report.md，每个单元格值和每条疑点都带图元 handle。适用于隧道/地下结构等算量审图场景，用户要“钢筋量”“导出钢筋表”“核对数量表”“钢筋表有没有算错”时使用。 | |
| ResearchClaw Autonomous research pipeline skill for Claude Code. Given a research topic, orchestrates 23 stages end-to-end: literature review, hypothesis generation, expe... | |
| Skill Multi Publisher One-command publish a Claude Code skill to ALL major marketplaces: GitHub (npx skills), ClawHub, and community marketplaces (composiohq/awesome-claude-skills... | |
| Social Copy Generator Generate platform-optimized social media copy for product launches. One input, 14 platform outputs (Twitter/X, LinkedIn, Hacker News, Reddit, Xiaohongshu, Ji... | |
| 任务同频器 一份合同生成给人和 AI 的同频任务包 | |
| TeacherKit AI 备课助手 AI 备课助手 — 一键生成教案、试题、课程大纲、课件PPT大纲、说课稿，覆盖小学/初中/高中/高职/本科/研究生。当用户提到备课、教案、出题、试卷、教学大纲、课件、PPT、说课时使用。AI Lesson Prep Kit for educators — lesson plans, quizzes, syllabi, slide outlines and lesson-presentation scripts. | |
| 童锦程视角 童锦程视角：以"深情祖师爷"、直播情感内容创作者的思维框架看待人际关系、社会动态与个人成长。 素材来源：9个一手视频字幕（直播/约会vlog/搭讪解析），约20万字。 核心模型：5个。决策启发式：9条。 触发词：「童锦程」「深情祖师爷」「用童锦程的方式」「从童锦程视角」「景辰怎么看」 局限：素材以情感/人际内容为... | |
| Waiting Tips Show bilingual learning tips while OpenClaw is thinking. 75 tips covering AI interaction, prompt engineering, productivity, and wisdom. Non-intrusive, works... | |
| 虾盘云音乐 · 一句话出歌 使用虾盘云音乐生成可播放的完整 AI 歌曲、纯音乐和 BGM，支持一句话出歌、歌词谱曲、AI 写词、纯音乐/背景音乐生成与余额查询。当用户要求写歌、创作歌曲、生成音乐、AI 作曲、把歌词唱出来、做 BGM 或纯音乐、仿写歌曲时使用。Use for AI music generation, song generation, instrumental music and BGM generation, text-to-music, lyrics-to-song, songwrit | |
| 钟馗卫士 检查中转风险、脱敏本地资料，并评估模型 API | |
| feedbacklens-analysis Automatically cluster a batch of user feedback (text/CSV/Excel), rank priorities with a quantitative "frequency × severity × impact scope" algorithm, produce actionable improvement suggestions, and generate a visual report. Built-in industr | |
| xbridge-ext-helper 帮助开发者在 xbridge3 框架中使用扩展字段（Extension Fields）。当用户需要： - 添加新的扩展字段到交易表 - 创建国家特定的扩展字段（如越南、马来西亚等） - 配置 @EntityColumnSchema 注解 - 使用 ExtensionUtils 读取/设置扩展字段 - 理解索引字段... | |
| Feishu Doc Collab Enable real-time AI collaboration in Feishu (Lark) documents. When a user edits a Feishu doc, the agent automatically detects the change, reads the document,... | |
| 品牌热点营销助手 AI 智能品牌营销工具：输入品牌名称，自动采集全网数据、分析当日热点、生成一篇小红书图文内容，支持一键自动发布 | |
| 品牌热点营销助手 AI 智能品牌营销工具：输入品牌名称，自动采集全网数据、分析当日热点、生成小红书图文内容 | |
| xiaoya-auto-doing Automate login and page capture for WHUT AI Augmented sites using agent-browser. Use when handling whut.ai-augmented.com or its subdomains, especially to ope... | |
| Musify MooreThreads Convert CUDA code to MUSA (Moore Threads GPU) using the musify tool. Use when migrating CUDA codebases to MUSA platform, converting CUDA kernels/APIs to MUSA... | |
| Hermes Installer Hermes Agent 安装配置完整指南。当用户要求安装 Hermes Agent、部署 Hermes、配置模型提供商、配置飞书/Telegram/Discord 网关时使用此 Skill。触发词：安装 Hermes、部署 Hermes Agent、配置 Hermes、配置 GLM、配置 Kimi、配置 Ope... | |
| ClawPeers Route people-finding and marketplace requests to ClawPeers in OpenClaw. Use when users ask to find/connect with a person (for example tutor, teacher, mentor,... | |
| ClawPeers Skill Router Operate ClawPeers in skill-first mode over HTTP APIs without requiring plugin installation. Use when users need onboarding for a new node identity, token aut... | |
| Skill Install Guard 安全拦截型技能，确保安装任何技能前都经过 skill-vetter 的安全审查，输出审查报告并要求用户明确确认，禁止私自安装。 | |
| AI Weekly Report AI周报总结 | |
| Property Advisor Property search, screening, comparison, map enrichment, profile memory, watched listings, and listing publishing orchestration. Use when the user asks to ren... | |
| Delivery Preference Resolver Determines user intent, destination, known/missing fields, and need for follow-up in a structured JSON output for delivery preference resolution. | |
| Slack Member Fetch Fetch Slack member information from a workspace or a specific Slack channel using the Slack Web API. Use when the user asks to list Slack members, get member... | |
| Tmpfiles Upload (Stdlib) Upload a local file to tmpfiles.org using Python standard library only, then return a direct download link in strict JSON. | |
| Corpus Access a user's Corpus library from OpenClaw. Use when the user asks to search saved content, fetch item details, save links into Corpus, or create reminders... | |
| Polymarket 交易助手 Polymarket 预测市场全链路 AI 交易工具包。包含 13 个 skill，覆盖市场扫描、概率评估、订单簿分析、实盘交易、持仓监控、结算追踪、回测复盘的完整工作流。支持中英双语。当用户提到 Polymarket 交易、预测市场分析、市场脉搏、持仓管理、自动交易时使用。 | |
| Polymarket 交易助手 基于全链路AI工具，从市场扫描到自动实盘交易，提供Polymarket交易决策、持仓管理与绩效回测功能。 | |
| Atlas Travel Extras Personal travel assistant for Atlas - dream destinations, planning, history, documents, budget, checklists and reminders | |
| Metaclaw Generischer Skill für Memory-Management, Hybrid Retrieval und Skill Evolution mit PluginEval Integration | |
| PluginEval PluginEval Quality Evaluation with enhanced UI. Wraps plugineval-core with vetting and reporting features. Requires plugineval-core. | |
| PluginEval Core Self-contained PluginEval quality evaluation engine. Measures 6 dimensions, detects anti-patterns, assigns badges. No external dependencies. | |
| Context Memory Optimizer v3.1 (ClawHub-safe, source-verified): OpenClaw context memory optimizer. Prevents context overflow, memory drift, and token waste in long agent sessions. Bas... | |
| OCTOOL for backup Openclaw Visual Configuration Assistant. Provides secure wizard for local/Git backup and workspace migration. | |
| Joan Workflow This skill should be used when the user asks about "joan", "pods", "workspace", "domain knowledge", "context sync", "joan init", "joan todo", or needs guidance on how Joan's knowledge management system works. Provides workflow guidance for | |
| Bilibili & YouTube Watcher Fetch and read transcripts from YouTube and Bilibili videos. Use when you need to summarize a video, answer questions about its content, or extract informati... | |
| Instaparser Use the Instaparser API to parse articles, PDFs, and generate summaries from URLs. Trigger when users want to extract content from web pages, parse PDF docum... | |
| Resume Risk Screen A skill for screening resumes for authenticity risk, packaging risk, and role fit. | |
| Weixin Plugin Installer 通过聊天指令安装微信连接、刷新最新二维码、查询当前二维码状态、取消当前二维码刷新任务。 | |
| Agent Observability - Open the Black Box Provides full observability for OpenClaw agents via dashboards, decision logs, failure traces, and weekly compliance scoring for effective monitoring and deb... | |
| Agent Stability Framework Provides a framework to prevent agent drift, catch faults, and maintain consistent on-character behavior across sessions and models. | |
| Correction Memory Makes agent corrections persistent and reusable. When you override, reject, or correct an agent's output, this skill logs the correction and automatically in... | |
| Intent Engineering - Make Agents Optimize for What You Actually Want Adds an intent layer to OpenClaw agents, ensuring subagents optimize for your actual priorities via INTENT.md and context-aware task spawning. | |
| Cost Governor - Subagent Budget Control Pre-flight cost estimation for subagent spawns and approval gates. Prevents API overspend and surprise billing. Budget control for sessions_spawn calls. Dail... | |
| Skill Vetter - Pre-Install Security Review Security vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification L... | |
| Subagent Architecture Advanced patterns for specialized subagent orchestration with production-ready reference implementations. Security isolation, phased implementation, peer col... |
26,701–26,750 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.