Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
daily-news-brief
文档中的危险卸载命令
Manual upload Apr 5, 2026
Open Report ↗
Review
kuaishou-genius-actual
--insecure 模式禁用 TLS 证书校验
Manual upload Apr 5, 2026
Open Report ↗
Review
skill-gatekeeper
未声明的外部命令执行
Manual upload Apr 5, 2026
Open Report ↗
High Risk
grok-swarm
未声明的shell执行功能
Manual upload Apr 5, 2026
Open Report ↗
Block
vnstock-env-setup
API keys sent to external server vnstocks.com
Manual upload Apr 5, 2026
Open Report ↗
High Risk
claw-ops-manager
Undeclared Shell Command Execution
Manual upload Apr 5, 2026
Open Report ↗
Review
hpr-solver
Undeclared LLM API calls to OpenRouter
Manual upload Apr 5, 2026
Open Report ↗
High Risk
gangtise-kb
Undeclared subprocess execution with missing binary
Manual upload Apr 5, 2026
Open Report ↗
Review
evolution-watcher
Documentation mismatch - file modification not declared
Manual upload Apr 5, 2026
Open Report ↗
High Risk
LLM Proxy
Critical content-blocking disabled — credential exfiltration not prevented
Manual upload Apr 4, 2026
Open Report ↗
High Risk
monid
Remote script execution via curl|bash from mutable branch
Manual upload Apr 4, 2026
Open Report ↗
Review
问专家技能
Bypass robot detection declared as legitimate use case
Manual upload Apr 4, 2026
Open Report ↗
High Risk
openviking-context
Undeclared curl|bash remote script execution
Manual upload Apr 4, 2026
Open Report ↗
High Risk
elevated-task-runner
Arbitrary PowerShell Command Execution
Manual upload Apr 4, 2026
Open Report ↗
Review
colmena-manager
Command injection via agentId in multiple exec() calls
Manual upload Apr 4, 2026
Open Report ↗
High Risk
token-sop
Automatic workflow contribution enabled by default
Manual upload Apr 4, 2026
Open Report ↗