Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
xinjianxue-skill-long_distance-cn
数据处理声明仅依赖文档，无代码验证
ClawHub Sep 14, 2026
Open Report ↗
Review
smyx-driver-flushing-sweat-detection-analysis
Undeclared subprocess execution capability
ClawHub Sep 14, 2026
Open Report ↗
Review
smyx-respiratory-rate-abnormal-detect-analysis
Undisclosed local SQLite token storage
ClawHub Sep 14, 2026
Open Report ↗
High Risk
nemesis-c2-bridge
Offensive C2 with /kill Endpoint
ClawHub Sep 14, 2026
Open Report ↗
Review
smyx-workplace-stress-heatmap-analysis
Undeclared local SQLite database with user identity
ClawHub Sep 13, 2026
Open Report ↗
Review
smyx-family-conflict-aftercare-suggest-analysis
Silent user identity auto-registration
ClawHub Sep 13, 2026
Open Report ↗
High Risk
northcap-donor-badge
Compiled bytecode points to undisclosed IP
ClawHub Sep 13, 2026
Open Report ↗
Review
delvorn-register
Undeclared promotional content injection script
ClawHub Sep 13, 2026
Open Report ↗
Review
tokst-memory
curl|bash管道执行远程脚本
ClawHub Sep 13, 2026
Open Report ↗
Review
BeatClaw
远程 SKILL.md 覆盖机制存在供应链攻击风险
ClawHub Sep 12, 2026
Open Report ↗
High Risk
openclaw-guardian (OpenClaw 全能守护包)
服务器端AI执行能力未披露
ClawHub Sep 11, 2026
Open Report ↗
Review
bothire
依赖外部动态协议规范
ClawHub Sep 11, 2026
Open Report ↗
Review
diet-tracker
未声明的Git自动推送功能
ClawHub Sep 10, 2026
Open Report ↗
Review
nautilus-polymarket-stops
外部npm包供应链风险
ClawHub Sep 9, 2026
Open Report ↗
Review
agent-credential-vault
声明安全性与可验证性差距
ClawHub Sep 9, 2026
Open Report ↗
Review
polish
Phase 1 命令执行未受限
ClawHub Sep 9, 2026
Open Report ↗