中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
58 /100
Trust
Review

psychology-analysis

未声明的本地数据库操作

Doc MismatchSensitive Access
ClawHub 14 days ago
Open Report ↗
60 /100
Trust
Review

anzhuang-suanliang

权限声明与实际能力严重不符

Doc MismatchSupply Chain
ClawHub 15 days ago
Open Report ↗
60 /100
Trust
Review

cue-regional-policy-brief

外部 Runner 代码不可审计

Supply ChainSensitive AccessDoc Mismatch
ClawHub 15 days ago
Open Report ↗
52 /100
Trust
Review

jira-toolkit-free

文档嵌入凭证收割命令模板

Credential TheftDoc MismatchSupply ChainPriv Escalation
ClawHub 16 days ago
Open Report ↗
55 /100
Trust
Review

companion-skill

尝试覆盖 agent 安全拒绝机制

Prompt InjectionDoc Mismatch
ClawHub 16 days ago
Open Report ↗
65 /100
Trust
Review

gaode-taxi

工具函数数量文档-代码严重不符

Doc MismatchSensitive AccessSupply Chain
ClawHub 19 days ago
Open Report ↗
65 /100
Trust
Review

cite-holmes

未声明的本地 ollama 调用

Doc MismatchSupply ChainSensitive Access
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

dlazy-webtoon-adapter

Shell execution capability not declared in SKILL.md

Doc MismatchPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
52 /100
Trust
Review

stratpit

文档声明与实际能力存在关键矛盾

Doc MismatchSupply ChainCredential TheftPriv Escalation
ClawHub 21 days ago
Open Report ↗
60 /100
Trust
Review

wenzi-runse

Hardcoded API key in distributed skill package

Credential TheftDoc Mismatch
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

demo-text-summarizer

SKILL.md 未声明的发布功能

Doc MismatchCredential TheftPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

agentwalletapi

环境变量声明与技能功能不符

Doc MismatchSupply Chain
ClawHub 22 days ago
Open Report ↗
45 /100
Trust
Review

auto-skill-hunter

文档未声明网络请求能力

Doc MismatchSensitive AccessRCESupply Chain
ClawHub 23 days ago
Open Report ↗
65 /100
Trust
Review

xhs-fav-export

wc3-code.mjs 高度代码混淆且未声明

ObfuscationDoc Mismatch
ClawHub 23 days ago
Open Report ↗
62 /100
Trust
Review

smyx-pet-grooming-stress-behavior-analysis

静默用户自动注册

Doc MismatchCredential TheftObfuscationSensitive Access
ClawHub 23 days ago
Open Report ↗
55 /100
Trust
Review

chrome-use

未版本锁定的远程脚本执行

Supply ChainDoc Mismatch
ClawHub 24 days ago
Open Report ↗
1 / 20
Next →