Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
smyx-respiratory-rate-abnormal-detect-analysis
Undisclosed local SQLite token storage
ClawHub Sep 14, 2026
Open Report ↗
High Risk
nemesis-c2-bridge
Offensive C2 with /kill Endpoint
ClawHub Sep 14, 2026
Open Report ↗
Review
smyx-workplace-stress-heatmap-analysis
Undeclared local SQLite database with user identity
ClawHub Sep 13, 2026
Open Report ↗
Review
delvorn-register
Undeclared promotional content injection script
ClawHub Sep 13, 2026
Open Report ↗
High Risk
openclaw-guardian (OpenClaw 全能守护包)
服务器端AI执行能力未披露
ClawHub Sep 11, 2026
Open Report ↗
Review
diet-tracker
未声明的Git自动推送功能
ClawHub Sep 10, 2026
Open Report ↗
Review
agent-credential-vault
声明安全性与可验证性差距
ClawHub Sep 9, 2026
Open Report ↗
Review
tokst-memory
危险 Shell 管道安装命令
ClawHub Sep 4, 2026
Open Report ↗
High Risk
smyx-pet-grooming-stress-behavior-analysis
未声明的subprocess执行能力
ClawHub Aug 30, 2026
Open Report ↗
High Risk
meta-analysis
Coze API 令牌以可逆混淆形式嵌入源代码，随技能公开发布
ClawHub Aug 29, 2026
Open Report ↗
Review
smyx-teen-screen-addiction-detection-analysis
已注释的远程代码执行准备代码
ClawHub Aug 26, 2026
Open Report ↗
Review
smyx-driver-flushing-sweat-detection-analysis
影子功能-本地SQLite数据库存储
ClawHub Aug 25, 2026
Open Report ↗
High Risk
smyx-family-conflict-aftercare-suggest-analysis
未声明的本地凭证数据库存储
ClawHub Aug 25, 2026
Open Report ↗
High Risk
xhs-fav-export
wc3-code.mjs 严重混淆代码
ClawHub Aug 23, 2026
Open Report ↗
Review
ct-advisor
用户问题数据外传至外部Coze服务器
ClawHub Aug 23, 2026
Open Report ↗
High Risk
northcap-donor-badge
文档声称本地验证，实际发往外部 IP
ClawHub Aug 21, 2026
Open Report ↗