中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
55 /100
Trust
Review

agent-credential-vault

声明安全性与可验证性差距

Doc MismatchData ExfilSupply Chain
ClawHub Sep 9, 2026
Open Report ↗
65 /100
Trust
Review

tokst-memory

危险 Shell 管道安装命令

Supply ChainData ExfilDoc Mismatch
ClawHub Sep 4, 2026
Open Report ↗
58 /100
Trust
Review

smyx-teen-screen-addiction-detection-analysis

已注释的远程代码执行准备代码

ObfuscationData ExfilCredential TheftSupply Chain
ClawHub Aug 26, 2026
Open Report ↗
48 /100
Trust
Review

smyx-driver-flushing-sweat-detection-analysis

影子功能-本地SQLite数据库存储

Doc MismatchCredential TheftSensitive AccessObfuscation
ClawHub Aug 25, 2026
Open Report ↗
58 /100
Trust
Review

ct-advisor

用户问题数据外传至外部Coze服务器

Data ExfilCredential TheftSensitive AccessDoc Mismatch
ClawHub Aug 23, 2026
Open Report ↗
45 /100
Trust
Review

northcap-donor-badge

网络权限声明与实际行为不符

Doc MismatchSupply ChainSensitive AccessData Exfil
ClawHub Aug 21, 2026
Open Report ↗
52 /100
Trust
Review

ClawCode Lens

用户代码发送至外部 IP

Data ExfilSupply ChainDoc Mismatch
ClawHub Aug 20, 2026
Open Report ↗
65 /100
Trust
Review

ClawSheet Wizard

公式数据外传到外部 IP

Data ExfilSupply ChainCredential TheftPriv Escalation
ClawHub Aug 20, 2026
Open Report ↗
45 /100
Trust
Review

ViBo — memory + living archive + web-search savings + thread memory + live handoff

100%文档、0%代码——所有声明的可执行组件完全缺失

Doc MismatchData ExfilSupply ChainSensitive Access
ClawHub Aug 19, 2026
Open Report ↗
58 /100
Trust
Review

rotifer-self-evolving-agent

通过npx动态执行远程npm包

Supply ChainPriv EscalationRCEData Exfil
ClawHub Aug 16, 2026
Open Report ↗
58 /100
Trust
Review

smyx-child-focus-analysis-analysis

隐式凭证管理机制

Sensitive AccessDoc MismatchData ExfilPriv Escalation
ClawHub Aug 11, 2026
Open Report ↗
55 /100
Trust
Review

dlazy-idea2video

文档-行为严重不符

Doc MismatchPriv EscalationData ExfilPrompt Injection
ClawHub Jul 21, 2026
Open Report ↗
45 /100
Trust
Review

xclawskill

文档引用不存在的核心脚本

Doc MismatchCredential TheftData ExfilSupply Chain
ClawHub Jul 10, 2026
Open Report ↗
45 /100
Trust
Review

微信助手智能网关 (wechat-new-tool)

未声明的外部服务器通信

Data ExfilSupply ChainSensitive AccessDoc Mismatch
ClawHub Jun 24, 2026
Open Report ↗
42 /100
Trust
Review

dating

主SKILL.md与子模块能力声明不一致

Doc MismatchSensitive AccessData ExfilSupply Chain
ClawHub Jun 24, 2026
Open Report ↗
45 /100
Trust
Review

sa-master

Hardcoded API bearer token in config.json

Credential TheftData ExfilDoc Mismatch
ClawHub Jun 22, 2026
Open Report ↗
← Previous
2 / 5
Next →