中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
28 /100
Trust
High Risk

openclaw-guardian

加密远程代码执行绕过代码审查

ObfuscationData ExfilDoc MismatchPersistence
ClawHub 13 days ago
Open Report ↗
60 /100
Trust
Review

anzhuang-suanliang

权限声明与实际能力严重不符

Doc MismatchSupply Chain
ClawHub 15 days ago
Open Report ↗
60 /100
Trust
Review

cue-regional-policy-brief

外部 Runner 代码不可审计

Supply ChainSensitive AccessDoc Mismatch
ClawHub 15 days ago
Open Report ↗
35 /100
Trust
High Risk

astraflow-remote-lab

未声明的阴影功能

Doc MismatchCredential TheftObfuscation
ClawHub 16 days ago
Open Report ↗
52 /100
Trust
Review

jira-toolkit-free

文档嵌入凭证收割命令模板

Credential TheftDoc MismatchSupply ChainPriv Escalation
ClawHub 16 days ago
Open Report ↗
12 /100
Trust
Block

profile-setting-key-workbench

凭证字段收割函数

Credential TheftData ExfilObfuscationDoc Mismatch
ClawHub 19 days ago
Open Report ↗
65 /100
Trust
Review

cite-holmes

未声明的本地 ollama 调用

Doc MismatchSupply ChainSensitive Access
ClawHub 20 days ago
Open Report ↗
55 /100
Trust
Review

dlazy-webtoon-adapter

Shell execution capability not declared in SKILL.md

Doc MismatchPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
52 /100
Trust
Review

stratpit

文档声明与实际能力存在关键矛盾

Doc MismatchSupply ChainCredential TheftPriv Escalation
ClawHub 21 days ago
Open Report ↗
60 /100
Trust
Review

wenzi-runse

Hardcoded API key in distributed skill package

Credential TheftDoc Mismatch
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

demo-text-summarizer

SKILL.md 未声明的发布功能

Doc MismatchCredential TheftPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

agentwalletapi

环境变量声明与技能功能不符

Doc MismatchSupply Chain
ClawHub 22 days ago
Open Report ↗
35 /100
Trust
High Risk

chrome-use

Remote Script Download and Execution via curl|bash

RCESupply ChainDoc Mismatch
ClawHub 23 days ago
Open Report ↗
35 /100
Trust
High Risk

precc

curl|bash 远程脚本执行 — 等效供应链攻击

Supply ChainRCEPriv EscalationDoc Mismatch
ClawHub 25 days ago
Open Report ↗
60 /100
Trust
Review

smyx-pet-oral-snapshot-gum-redness-analysis

Network communication not declared in SKILL.md

Doc MismatchPriv EscalationSensitive Access
ClawHub 26 days ago
Open Report ↗
55 /100
Trust
Review

elevenlabs-toolkit

未声明的 Mistral API 集成（阴影功能）

Doc MismatchSupply Chain
ClawHub 26 days ago
Open Report ↗
1 / 24
Next →