中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
65 /100
Trust
Review

xhs-fav-export

wc3-code.mjs 高度代码混淆且未声明

ObfuscationDoc Mismatch
ClawHub 23 days ago
Open Report ↗
62 /100
Trust
Review

smyx-pet-grooming-stress-behavior-analysis

静默用户自动注册

Doc MismatchCredential TheftObfuscationSensitive Access
ClawHub 23 days ago
Open Report ↗
55 /100
Trust
Review

backlog

Undeclared K3s/kubectl shell execution

Doc MismatchObfuscationSensitive AccessPriv Escalation
ClawHub 26 days ago
Open Report ↗
55 /100
Trust
Review

migu-ai-creative-photo

User-Agent 版本号格式异常

ObfuscationSensitive AccessCredential Theft
ClawHub 28 days ago
Open Report ↗
58 /100
Trust
Review

astraflow-remote-lab

沙箱内进程管理未声明

Doc MismatchObfuscationPersistence
ClawHub 29 days ago
Open Report ↗
55 /100
Trust
Review

浙江供应商资质业绩核验

硬编码IP地址与声明不符

Doc MismatchCredential TheftObfuscationSupply Chain
ClawHub Sep 25, 2026
Open Report ↗
53 /100
Trust
Review

xhs-note-analyst (账号诊断)

Obfuscated wc3-code.mjs with undeclared data exfiltration path

ObfuscationDoc MismatchSensitive Access
ClawHub Sep 14, 2026
Open Report ↗
58 /100
Trust
Review

smyx-teen-screen-addiction-detection-analysis

已注释的远程代码执行准备代码

ObfuscationData ExfilCredential TheftSupply Chain
ClawHub Aug 26, 2026
Open Report ↗
48 /100
Trust
Review

smyx-driver-flushing-sweat-detection-analysis

影子功能-本地SQLite数据库存储

Doc MismatchCredential TheftSensitive AccessObfuscation
ClawHub Aug 25, 2026
Open Report ↗
58 /100
Trust
Review

ct-advisor

用户问题数据外传至外部Coze服务器

Data ExfilCredential TheftSensitive AccessDoc Mismatch
ClawHub Aug 23, 2026
Open Report ↗
55 /100
Trust
Review

mcp-server-builder

包含未使用的自签名证书

ObfuscationDoc MismatchSupply Chain
ClawHub Aug 21, 2026
Open Report ↗
48 /100
Trust
Review

pancreatic-lipase-pro-docking

核心代码以base64编码zip形式隐藏

ObfuscationSupply ChainDoc Mismatch
ClawHub Aug 6, 2026
Open Report ↗
55 /100
Trust
Review

news-briefing

未声明的封面图生成功能

Doc MismatchObfuscationSensitive Access
ClawHub Jun 21, 2026
Open Report ↗
60 /100
Trust
Review

cloud-compare

文档声明与代码行为不符

Doc MismatchObfuscationSupply ChainSensitive Access
ClawHub Jun 14, 2026
Open Report ↗
35 /100
Trust
Review

gpt-image-2

未声明的外部网络通信

Doc MismatchData ExfilObfuscation
ClawHub Apr 22, 2026
Open Report ↗
55 /100
Trust
Review

auto-skill-hunter

权限声明与实际能力严重不符

Priv EscalationSupply ChainDoc MismatchSensitive Access
ClawHub Apr 19, 2026
Open Report ↗
1 / 2
Next →