中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
28 /100
Trust
High Risk

openclaw-guardian

加密远程代码执行绕过代码审查

ObfuscationData ExfilDoc MismatchPersistence
ClawHub 13 days ago
Open Report ↗
35 /100
Trust
High Risk

astraflow-remote-lab

未声明的阴影功能

Doc MismatchCredential TheftObfuscation
ClawHub 16 days ago
Open Report ↗
35 /100
Trust
High Risk

self-evolution-engine

硬编码API密钥泄露

Credential TheftDoc MismatchPriv EscalationSupply Chain
ClawHub 16 days ago
Open Report ↗
12 /100
Trust
Block

profile-setting-key-workbench

凭证字段收割函数

Credential TheftData ExfilObfuscationDoc Mismatch
ClawHub 19 days ago
Open Report ↗
62 /100
Trust
Review

smyx-pet-grooming-stress-behavior-analysis

静默用户自动注册

Doc MismatchCredential TheftObfuscationSensitive Access
ClawHub 23 days ago
Open Report ↗
55 /100
Trust
Review

backlog

Undeclared K3s/kubectl shell execution

Doc MismatchObfuscationSensitive AccessPriv Escalation
ClawHub 26 days ago
Open Report ↗
55 /100
Trust
Review

migu-ai-creative-photo

User-Agent 版本号格式异常

ObfuscationSensitive AccessCredential Theft
ClawHub 27 days ago
Open Report ↗
55 /100
Trust
Review

浙江供应商资质业绩核验

硬编码IP地址与声明不符

Doc MismatchCredential TheftObfuscationSupply Chain
ClawHub Sep 25, 2026
Open Report ↗
53 /100
Trust
Review

xhs-note-analyst (账号诊断)

Obfuscated wc3-code.mjs with undeclared data exfiltration path

ObfuscationDoc MismatchSensitive Access
ClawHub Sep 14, 2026
Open Report ↗
30 /100
Trust
High Risk

northcap-donor-badge

Compiled bytecode points to undisclosed IP

Supply ChainDoc MismatchObfuscation
ClawHub Sep 13, 2026
Open Report ↗
35 /100
Trust
High Risk

GitToQuark

无实际代码实现

Supply ChainCredential TheftObfuscation
ClawHub Sep 1, 2026
Open Report ↗
58 /100
Trust
Review

smyx-teen-screen-addiction-detection-analysis

已注释的远程代码执行准备代码

ObfuscationData ExfilCredential TheftSupply Chain
ClawHub Aug 26, 2026
Open Report ↗
48 /100
Trust
Review

smyx-driver-flushing-sweat-detection-analysis

影子功能-本地SQLite数据库存储

Doc MismatchCredential TheftSensitive AccessObfuscation
ClawHub Aug 25, 2026
Open Report ↗
32 /100
Trust
High Risk

xhs-fav-export

wc3-code.mjs 严重混淆代码

ObfuscationDoc MismatchSupply ChainData Exfil
ClawHub Aug 23, 2026
Open Report ↗
58 /100
Trust
Review

ct-advisor

用户问题数据外传至外部Coze服务器

Data ExfilCredential TheftSensitive AccessDoc Mismatch
ClawHub Aug 23, 2026
Open Report ↗
22 /100
Trust
High Risk

video-content-pipeline

伪造CA证书内置于技能包

ObfuscationCredential TheftDoc MismatchSensitive Access
ClawHub Aug 21, 2026
Open Report ↗
1 / 3
Next →