Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
High Risk
chrome-use
Remote Script Download and Execution via curl|bash
ClawHub 23 days ago
Open Report ↗
High Risk
precc
curl|bash 远程脚本执行 — 等效供应链攻击
ClawHub 25 days ago
Open Report ↗
High Risk
nemesis-c2-bridge
Offensive C2 with /kill Endpoint
ClawHub Sep 14, 2026
Open Report ↗
High Risk
smyx-pet-grooming-stress-behavior-analysis
未声明的subprocess执行能力
ClawHub Aug 30, 2026
Open Report ↗
High Risk
smyx-family-conflict-aftercare-suggest-analysis
未声明的本地凭证数据库存储
ClawHub Aug 25, 2026
Open Report ↗
High Risk
klyc-pmm
curl|bash 管道执行远程脚本 — install-daemon
ClawHub Jul 28, 2026
Open Report ↗
High Risk
perkoon-transfer
远程代码执行(RCE)风险
ClawHub Jul 20, 2026
Open Report ↗
High Risk
summarize
远程 Shell 脚本执行（curl|bash 管道）
ClawHub Jul 5, 2026
Open Report ↗
High Risk
tunnel-proxy
Unrestricted PTY shell access granted to agent
ClawHub Jun 21, 2026
Open Report ↗
High Risk
pub
Remote script execution from unverified source
ClawHub Jun 18, 2026
Open Report ↗
High Risk
superada-workflow-entity-mission-control-bootstrap
外部仓库代码执行
ClawHub Jun 3, 2026
Open Report ↗
High Risk
ludwitt-university
updateInstructions 远程代码执行通道
ClawHub Apr 12, 2026
Open Report ↗
High Risk
skill-registry-unified
未声明的远程代码执行
ClawHub Apr 6, 2026
Open Report ↗
High Risk
grok-swarm
未声明的shell执行功能
Manual upload Apr 5, 2026
Open Report ↗
High Risk
claw-ops-manager
Undeclared Shell Command Execution
Manual upload Apr 5, 2026
Open Report ↗
High Risk
gangtise-kb
Undeclared subprocess execution with missing binary
Manual upload Apr 5, 2026
Open Report ↗