Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
huawei-cloud-devbridge-tunnel
Unsafe curl|bash remote script execution
ClawHub Aug 13, 2026
Open Report ↗
Review
rustok-wallet-tui
cosign验证可选导致供应链完整性未保障
ClawHub Aug 12, 2026
Open Report ↗
Review
smyx-child-focus-analysis-analysis
隐式凭证管理机制
ClawHub Aug 11, 2026
Open Report ↗
Review
staff-absence-detection-analysis
未声明的本地用户自动创建机制
ClawHub Aug 10, 2026
Open Report ↗
Review
coppa-check
--non-interactive 模式影子联网行为
ClawHub Aug 10, 2026
Open Report ↗
Review
cloud-ops-orchestrator
文档占位符泛滥
ClawHub Aug 8, 2026
Open Report ↗
Review
pancreatic-lipase-pro-docking
核心代码以base64编码zip形式隐藏
ClawHub Aug 6, 2026
Open Report ↗
Review
agent4-io
远程脚本执行（curl|sh）
ClawHub Jul 30, 2026
Open Report ↗
High Risk
yqzl-ai-service
Automatic code download and execution without consent
ClawHub Jul 28, 2026
Open Report ↗
Review
alibabacloud-workbench-cli
curl|bash 远程脚本执行
ClawHub Jul 27, 2026
Open Report ↗
Review
doc-parse-tool-free
核心能力章节全文为无意义占位符
ClawHub Jul 26, 2026
Open Report ↗
Review
url-manager
文档包含危险 Shell 命令
ClawHub Jul 23, 2026
Open Report ↗
Review
dlazy-idea2video
文档-行为严重不符
ClawHub Jul 21, 2026
Open Report ↗
Review
pr-description-gen
功能描述极度模糊
ClawHub Jul 12, 2026
Open Report ↗
Review
tkseller
凭证以明文发送至外部服务器
ClawHub Jul 12, 2026
Open Report ↗
Review
gpt-chat
Undeclared HTTP server with API endpoints
ClawHub Jul 10, 2026
Open Report ↗