Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
xhs-skill-pusher
Shell execution not declared in SKILL.md
Manual upload Apr 4, 2026
Open Report ↗
Review
openclaw-usage-manager
API tokens stored in plaintext on disk
Manual upload Apr 4, 2026
Open Report ↗
Review
oracle-report
Hardcoded QVeris API Key
Manual upload Apr 4, 2026
Open Report ↗
Review
clawclone
Missing implementation file
Manual upload Apr 4, 2026
Open Report ↗
Review
微信助手智能网关 (wechat-ai-bridge)
Undeclared external network communication
Manual upload Apr 4, 2026
Open Report ↗
High Risk
self-evolution-engine
Hardcoded Billing API Key in Source Code
Manual upload Apr 4, 2026
Open Report ↗
Review
security-defense-line
Hardcoded API Key in Source Code
Manual upload Apr 4, 2026
Open Report ↗
High Risk
long-term-memory
Hardcoded API Key in Source Code
Manual upload Apr 4, 2026
Open Report ↗
Review
rewrite_question
Network capability declared as NONE but actual traffic exists
Manual upload Apr 4, 2026
Open Report ↗
Review
sql_audit
Hardcoded JWT token in source code
Manual upload Apr 4, 2026
Open Report ↗
High Risk
nano-banana-pro
Hardcoded DASHSCOPE_API_KEY in _meta.json
Manual upload Apr 4, 2026
Open Report ↗
High Risk
huo15-memory-evolution
Hardcoded API Key in Source Code
Manual upload Apr 4, 2026
Open Report ↗
Review
hostlink
No allowed-tools declaration despite full shell access
Manual upload Apr 4, 2026
Open Report ↗
Review
Bitget Trader
Exposed API Credentials in Plaintext
Manual upload Apr 4, 2026
Open Report ↗
High Risk
messenger_send_node
Undeclared Tor Network Routing
Manual upload Apr 3, 2026
Open Report ↗
Review
figma-agent
Undeclared scanning of Claude Code credential store
Manual upload Apr 3, 2026
Open Report ↗