中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

599 Risky samples surfaced
23 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
12 /100
Trust
Block

profile-setting-key-workbench

凭证字段收割函数

Credential TheftData ExfilObfuscationDoc Mismatch
ClawHub 2 days ago
Open Report ↗
65 /100
Trust
Review

cite-holmes

未声明的本地 ollama 调用

Doc MismatchSupply ChainSensitive Access
ClawHub 4 days ago
Open Report ↗
55 /100
Trust
Review

dlazy-webtoon-adapter

Shell execution capability not declared in SKILL.md

Doc MismatchPriv EscalationSupply Chain
ClawHub 4 days ago
Open Report ↗
52 /100
Trust
Review

stratpit

文档声明与实际能力存在关键矛盾

Doc MismatchSupply ChainCredential TheftPriv Escalation
ClawHub 4 days ago
Open Report ↗
60 /100
Trust
Review

wenzi-runse

Hardcoded API key in distributed skill package

Credential TheftDoc Mismatch
ClawHub 4 days ago
Open Report ↗
55 /100
Trust
Review

demo-text-summarizer

SKILL.md 未声明的发布功能

Doc MismatchCredential TheftPriv EscalationSupply Chain
ClawHub 4 days ago
Open Report ↗
55 /100
Trust
Review

agent-guardian

apply-qqbot-patch.sh 通过 sed 注入 execSync 修改第三方插件

RCEPersistenceSupply ChainSensitive Access
ClawHub 5 days ago
Open Report ↗
55 /100
Trust
Review

agentwalletapi

环境变量声明与技能功能不符

Doc MismatchSupply Chain
ClawHub 5 days ago
Open Report ↗
35 /100
Trust
High Risk

chrome-use

Remote Script Download and Execution via curl|bash

RCESupply ChainDoc Mismatch
ClawHub 6 days ago
Open Report ↗
35 /100
Trust
High Risk

precc

curl|bash 远程脚本执行 — 等效供应链攻击

Supply ChainRCEPriv EscalationDoc Mismatch
ClawHub 8 days ago
Open Report ↗
60 /100
Trust
Review

smyx-pet-oral-snapshot-gum-redness-analysis

Network communication not declared in SKILL.md

Doc MismatchPriv EscalationSensitive Access
ClawHub 9 days ago
Open Report ↗
55 /100
Trust
Review

elevenlabs-toolkit

未声明的 Mistral API 集成（阴影功能）

Doc MismatchSupply Chain
ClawHub 9 days ago
Open Report ↗
55 /100
Trust
Review

backlog

Undeclared K3s/kubectl shell execution

Doc MismatchObfuscationSensitive AccessPriv Escalation
ClawHub 9 days ago
Open Report ↗
58 /100
Trust
Review

weread-fulltext

文档声明「零注入」但实际使用 page.evaluate() 执行 JS

Doc MismatchSupply ChainPriv Escalation
ClawHub 9 days ago
Open Report ↗
55 /100
Trust
Review

migu-ai-creative-photo

User-Agent 版本号格式异常

ObfuscationSensitive AccessCredential Theft
ClawHub 11 days ago
Open Report ↗
58 /100
Trust
Review

astraflow-remote-lab

沙箱内进程管理未声明

Doc MismatchObfuscationPersistence
ClawHub 12 days ago
Open Report ↗
1 / 28
Next →