中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
52 /100
Trust
Review

jira-toolkit-free

文档嵌入凭证收割命令模板

Credential TheftDoc MismatchSupply ChainPriv Escalation
ClawHub 16 days ago
Open Report ↗
65 /100
Trust
Review

dlazy-text-storyboard-script

主文档与执行指南声明矛盾

Doc MismatchPriv EscalationSupply ChainCredential Theft
ClawHub 18 days ago
Open Report ↗
52 /100
Trust
Review

stratpit

文档声明与实际能力存在关键矛盾

Doc MismatchSupply ChainCredential TheftPriv Escalation
ClawHub 21 days ago
Open Report ↗
60 /100
Trust
Review

wenzi-runse

Hardcoded API key in distributed skill package

Credential TheftDoc Mismatch
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

demo-text-summarizer

SKILL.md 未声明的发布功能

Doc MismatchCredential TheftPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
62 /100
Trust
Review

smyx-pet-grooming-stress-behavior-analysis

静默用户自动注册

Doc MismatchCredential TheftObfuscationSensitive Access
ClawHub 23 days ago
Open Report ↗
45 /100
Trust
Review

mcp-server-builder

SKILL.md与skill-card.md声明冲突

Doc MismatchSupply ChainCredential Theft
ClawHub 24 days ago
Open Report ↗
55 /100
Trust
Review

backlog

Undeclared K3s/kubectl shell execution

Doc MismatchObfuscationSensitive AccessPriv Escalation
ClawHub 26 days ago
Open Report ↗
55 /100
Trust
Review

migu-ai-creative-photo

User-Agent 版本号格式异常

ObfuscationSensitive AccessCredential Theft
ClawHub 27 days ago
Open Report ↗
55 /100
Trust
Review

elderly-fall-detection-analysis

注释代码中存在未声明的远程执行能力

Doc MismatchCredential TheftSupply ChainPriv Escalation
ClawHub 29 days ago
Open Report ↗
55 /100
Trust
Review

smyx-elderly-medication-compliance-analysis

影子凭证收集机制

Credential TheftSensitive AccessData ExfilSupply Chain
ClawHub 29 days ago
Open Report ↗
55 /100
Trust
Review

浙江企业工商信息查询（按名核验）

硬编码IP绕过DNS透明度

Sensitive AccessData ExfilCredential Theft
ClawHub Sep 25, 2026
Open Report ↗
55 /100
Trust
Review

浙江供应商资质业绩核验

硬编码IP地址与声明不符

Doc MismatchCredential TheftObfuscationSupply Chain
ClawHub Sep 25, 2026
Open Report ↗
55 /100
Trust
Review

smyx-aggressive-behavior-detection-analysis

Undocumented subprocess capability in ai_chat method

Doc MismatchSensitive AccessCredential Theft
ClawHub Sep 20, 2026
Open Report ↗
55 /100
Trust
Review

clawpi-redpacket-monitor

Undeclared JWT token extraction from wallet config

Credential TheftRCEDoc MismatchSensitive Access
ClawHub Sep 19, 2026
Open Report ↗
35 /100
Trust
Review

agent-guard

External npm package with uninspectable code

Supply ChainDoc MismatchSensitive AccessCredential Theft
ClawHub Sep 19, 2026
Open Report ↗
1 / 7
Next →