Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
High Risk
xhs-fav-export
wc3-code.mjs 严重混淆代码
ClawHub Aug 23, 2026
Open Report ↗
High Risk
video-content-pipeline
伪造CA证书内置于技能包
ClawHub Aug 21, 2026
Open Report ↗
High Risk
xhs-note-analyst
wc3-code.mjs 严重代码混淆
ClawHub Aug 13, 2026
Open Report ↗
High Risk
yqzl-ai-service
Automatic code download and execution without consent
ClawHub Jul 28, 2026
Open Report ↗
High Risk
klyc-pmm
curl|bash 管道执行远程脚本 — install-daemon
ClawHub Jul 28, 2026
Open Report ↗
High Risk
summarize
远程 Shell 脚本执行（curl|bash 管道）
ClawHub Jul 5, 2026
Open Report ↗
High Risk
psychology-analysis
静默phoneLogin调用
ClawHub Jun 28, 2026
Open Report ↗
High Risk
x-daily-report
Hardcoded X API Key with 'auto-obtained' comment
ClawHub Jun 24, 2026
Open Report ↗
High Risk
auto-skill-hunter
Undeclared shell:WRITE via execSync — git clone
ClawHub Jun 24, 2026
Open Report ↗
High Risk
memphis-cognitive
Remote script execution via curl|bash
ClawHub Jun 24, 2026
Open Report ↗
High Risk
gpt-image-2
Hardcoded external IP with no DNS resolution
ClawHub Jun 22, 2026
Open Report ↗
High Risk
tunnel-proxy
Unrestricted PTY shell access granted to agent
ClawHub Jun 21, 2026
Open Report ↗
High Risk
birth-system-manager
SKILL.md claims private keys are never displayed, but code prints them to stdout
ClawHub Jun 18, 2026
Open Report ↗
High Risk
pub
Remote script execution from unverified source
ClawHub Jun 18, 2026
Open Report ↗
High Risk
skill-publisher
Hardcoded GitHub Personal Access Token
ClawHub Jun 15, 2026
Open Report ↗
High Risk
agnes-image-gen
Hardcoded real API key in SKILL.md
ClawHub Jun 10, 2026
Open Report ↗