中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
28 /100
Trust
High Risk

openclaw-guardian

加密远程代码执行绕过代码审查

ObfuscationData ExfilDoc MismatchPersistence
ClawHub 13 days ago
Open Report ↗
12 /100
Trust
Block

profile-setting-key-workbench

凭证字段收割函数

Credential TheftData ExfilObfuscationDoc Mismatch
ClawHub 19 days ago
Open Report ↗
55 /100
Trust
Review

daily-memory-summary

SKILL.md 未声明联系人解析功能

Doc MismatchData ExfilSensitive Access
ClawHub 21 days ago
Open Report ↗
62 /100
Trust
Review

wenzi-runse

硬编码API密钥于源码中

Supply ChainData ExfilCredential TheftPriv Escalation
ClawHub 25 days ago
Open Report ↗
55 /100
Trust
Review

smyx-elderly-medication-compliance-analysis

影子凭证收集机制

Credential TheftSensitive AccessData ExfilSupply Chain
ClawHub 29 days ago
Open Report ↗
55 /100
Trust
Review

浙江企业工商信息查询（按名核验）

硬编码IP绕过DNS透明度

Sensitive AccessData ExfilCredential Theft
ClawHub Sep 25, 2026
Open Report ↗
60 /100
Trust
Review

smyx-pet-oral-snapshot-gum-redness-analysis

隐藏参数未在SKILL.md声明

Doc MismatchData ExfilSensitive AccessSupply Chain
ClawHub Sep 23, 2026
Open Report ↗
48 /100
Trust
Review

浙江供应商资质业绩核验

声明与实际网络协议不符

Doc MismatchData ExfilSupply Chain
ClawHub Sep 23, 2026
Open Report ↗
55 /100
Trust
Review

session-notebook

会话转录文件全文上传至外部端点

Data ExfilDoc MismatchSensitive AccessSupply Chain
ClawHub Sep 23, 2026
Open Report ↗
65 /100
Trust
Review

infant-blanket-kick-monitoring-analysis

用户身份凭证发送至外部服务器

Data ExfilSensitive AccessRCEPriv Escalation
ClawHub Sep 21, 2026
Open Report ↗
45 /100
Trust
Review

award-contract-consistency-check-free

SKILL.md 声明不联网但实际存在外部网络请求

Doc MismatchData ExfilPriv EscalationPrompt Injection
ClawHub Sep 19, 2026
Open Report ↗
55 /100
Trust
Review

asset-disposal-check-free

文档声称离线运行但实际有网络行为

Doc MismatchData ExfilPriv EscalationSensitive Access
ClawHub Sep 19, 2026
Open Report ↗
48 /100
Trust
Review

asset-impairment-check-free

匿名标识声明与实际不符

Doc MismatchData ExfilPriv Escalation
ClawHub Sep 19, 2026
Open Report ↗
58 /100
Trust
Review

购物省钱宝

Undeclared outbound HTTP call on every query

Doc MismatchSupply ChainData Exfil
ClawHub Sep 18, 2026
Open Report ↗
25 /100
Trust
High Risk

mcp-server-builder

X402_API_KEY harvested from environment

Credential TheftData ExfilDoc MismatchSupply Chain
ClawHub Sep 18, 2026
Open Report ↗
35 /100
Trust
High Risk

gaode-taxi

未声明的第三方代理数据中转

Data ExfilDoc MismatchCredential Theft
ClawHub Sep 14, 2026
Open Report ↗
1 / 7
Next →