中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
52 /100
Trust
Review

ClawCode Lens

用户代码发送至外部 IP

Data ExfilSupply ChainDoc Mismatch
ClawHub Aug 20, 2026
Open Report ↗
65 /100
Trust
Review

ClawSheet Wizard

公式数据外传到外部 IP

Data ExfilSupply ChainCredential TheftPriv Escalation
ClawHub Aug 20, 2026
Open Report ↗
45 /100
Trust
Review

ViBo — memory + living archive + web-search savings + thread memory + live handoff

100%文档、0%代码——所有声明的可执行组件完全缺失

Doc MismatchData ExfilSupply ChainSensitive Access
ClawHub Aug 19, 2026
Open Report ↗
58 /100
Trust
Review

rotifer-self-evolving-agent

通过npx动态执行远程npm包

Supply ChainPriv EscalationRCEData Exfil
ClawHub Aug 16, 2026
Open Report ↗
25 /100
Trust
High Risk

xhs-note-analyst

wc3-code.mjs 严重代码混淆

ObfuscationData ExfilDoc MismatchSupply Chain
ClawHub Aug 13, 2026
Open Report ↗
58 /100
Trust
Review

smyx-child-focus-analysis-analysis

隐式凭证管理机制

Sensitive AccessDoc MismatchData ExfilPriv Escalation
ClawHub Aug 11, 2026
Open Report ↗
20 /100
Trust
High Risk

klyc-pmm

curl|bash 管道执行远程脚本 — install-daemon

Supply ChainDoc MismatchSensitive AccessData Exfil
ClawHub Jul 28, 2026
Open Report ↗
55 /100
Trust
Review

dlazy-idea2video

文档-行为严重不符

Doc MismatchPriv EscalationData ExfilPrompt Injection
ClawHub Jul 21, 2026
Open Report ↗
45 /100
Trust
Review

xclawskill

文档引用不存在的核心脚本

Doc MismatchCredential TheftData ExfilSupply Chain
ClawHub Jul 10, 2026
Open Report ↗
45 /100
Trust
Review

微信助手智能网关 (wechat-new-tool)

未声明的外部服务器通信

Data ExfilSupply ChainSensitive AccessDoc Mismatch
ClawHub Jun 24, 2026
Open Report ↗
42 /100
Trust
Review

dating

主SKILL.md与子模块能力声明不一致

Doc MismatchSensitive AccessData ExfilSupply Chain
ClawHub Jun 24, 2026
Open Report ↗
0 /100
Trust
Block

math-calculator

Reverse Shell Payload Embedded in Script

RCEDoc MismatchData ExfilObfuscation
GitHub Jun 24, 2026
Open Report ↗
45 /100
Trust
Review

sa-master

Hardcoded API bearer token in config.json

Credential TheftData ExfilDoc Mismatch
ClawHub Jun 22, 2026
Open Report ↗
40 /100
Trust
Review

辛一金虹桥店7天排产预测

Sensitive spreadsheets uploaded to unauthenticated plain-HTTP endpoint

Data ExfilDoc MismatchSupply ChainPriv Escalation
ClawHub Jun 22, 2026
Open Report ↗
28 /100
Trust
High Risk

gpt-image-2

Hardcoded external IP with no DNS resolution

Data ExfilDoc MismatchCredential TheftSensitive Access
ClawHub Jun 22, 2026
Open Report ↗
50 /100
Trust
Review

pm-master

Bearer 令牌硬编码于配置文件中随分发包传播

Credential TheftData ExfilDoc MismatchSupply Chain
ClawHub Jun 21, 2026
Open Report ↗
← Previous
3 / 7
Next →