中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

605 Risky samples surfaced
24 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
60 /100
Trust
Review

cue-regional-policy-brief

外部 Runner 代码不可审计

Supply ChainSensitive AccessDoc Mismatch
ClawHub 7 hr ago
Open Report ↗
35 /100
Trust
High Risk

astraflow-remote-lab

未声明的阴影功能

Doc MismatchCredential TheftObfuscation
ClawHub 12 hr ago
Open Report ↗
52 /100
Trust
Review

jira-toolkit-free

文档嵌入凭证收割命令模板

Credential TheftDoc MismatchSupply ChainPriv Escalation
ClawHub 22 hr ago
Open Report ↗
12 /100
Trust
Block

profile-setting-key-workbench

凭证字段收割函数

Credential TheftData ExfilObfuscationDoc Mismatch
ClawHub 4 days ago
Open Report ↗
65 /100
Trust
Review

cite-holmes

未声明的本地 ollama 调用

Doc MismatchSupply ChainSensitive Access
ClawHub 5 days ago
Open Report ↗
55 /100
Trust
Review

dlazy-webtoon-adapter

Shell execution capability not declared in SKILL.md

Doc MismatchPriv EscalationSupply Chain
ClawHub 5 days ago
Open Report ↗
52 /100
Trust
Review

stratpit

文档声明与实际能力存在关键矛盾

Doc MismatchSupply ChainCredential TheftPriv Escalation
ClawHub 5 days ago
Open Report ↗
60 /100
Trust
Review

wenzi-runse

Hardcoded API key in distributed skill package

Credential TheftDoc Mismatch
ClawHub 5 days ago
Open Report ↗
55 /100
Trust
Review

demo-text-summarizer

SKILL.md 未声明的发布功能

Doc MismatchCredential TheftPriv EscalationSupply Chain
ClawHub 6 days ago
Open Report ↗
55 /100
Trust
Review

agent-guardian

apply-qqbot-patch.sh 通过 sed 注入 execSync 修改第三方插件

RCEPersistenceSupply ChainSensitive Access
ClawHub 6 days ago
Open Report ↗
55 /100
Trust
Review

agentwalletapi

环境变量声明与技能功能不符

Doc MismatchSupply Chain
ClawHub 7 days ago
Open Report ↗
35 /100
Trust
High Risk

chrome-use

Remote Script Download and Execution via curl|bash

RCESupply ChainDoc Mismatch
ClawHub 7 days ago
Open Report ↗
35 /100
Trust
High Risk

precc

curl|bash 远程脚本执行 — 等效供应链攻击

Supply ChainRCEPriv EscalationDoc Mismatch
ClawHub 9 days ago
Open Report ↗
60 /100
Trust
Review

smyx-pet-oral-snapshot-gum-redness-analysis

Network communication not declared in SKILL.md

Doc MismatchPriv EscalationSensitive Access
ClawHub 10 days ago
Open Report ↗
55 /100
Trust
Review

elevenlabs-toolkit

未声明的 Mistral API 集成（阴影功能）

Doc MismatchSupply Chain
ClawHub 10 days ago
Open Report ↗
55 /100
Trust
Review

backlog

Undeclared K3s/kubectl shell execution

Doc MismatchObfuscationSensitive AccessPriv Escalation
ClawHub 11 days ago
Open Report ↗
1 / 28
Next →