中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

510 Risky samples surfaced
12 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
35 /100
Trust
High Risk

GitToQuark

无实际代码实现

Supply ChainCredential TheftObfuscation
ClawHub 9 days ago
Open Report ↗
58 /100
Trust
Review

smyx-teen-screen-addiction-detection-analysis

已注释的远程代码执行准备代码

ObfuscationData ExfilCredential TheftSupply Chain
ClawHub 16 days ago
Open Report ↗
48 /100
Trust
Review

smyx-driver-flushing-sweat-detection-analysis

影子功能-本地SQLite数据库存储

Doc MismatchCredential TheftSensitive AccessObfuscation
ClawHub 16 days ago
Open Report ↗
32 /100
Trust
High Risk

xhs-fav-export

wc3-code.mjs 严重混淆代码

ObfuscationDoc MismatchSupply ChainData Exfil
ClawHub 19 days ago
Open Report ↗
58 /100
Trust
Review

ct-advisor

用户问题数据外传至外部Coze服务器

Data ExfilCredential TheftSensitive AccessDoc Mismatch
ClawHub 19 days ago
Open Report ↗
22 /100
Trust
High Risk

video-content-pipeline

伪造CA证书内置于技能包

ObfuscationCredential TheftDoc MismatchSensitive Access
ClawHub 20 days ago
Open Report ↗
55 /100
Trust
Review

mcp-server-builder

包含未使用的自签名证书

ObfuscationDoc MismatchSupply Chain
ClawHub 20 days ago
Open Report ↗
25 /100
Trust
High Risk

xhs-note-analyst

wc3-code.mjs 严重代码混淆

ObfuscationData ExfilDoc MismatchSupply Chain
ClawHub 28 days ago
Open Report ↗
48 /100
Trust
Review

pancreatic-lipase-pro-docking

核心代码以base64编码zip形式隐藏

ObfuscationSupply ChainDoc Mismatch
ClawHub Aug 6, 2026
Open Report ↗
35 /100
Trust
High Risk

perkoon-transfer

远程代码执行(RCE)风险

RCESupply ChainSensitive AccessObfuscation
ClawHub Jul 20, 2026
Open Report ↗
0 /100
Trust
Block

math-calculator

Reverse Shell Payload Embedded in Script

RCEDoc MismatchData ExfilObfuscation
GitHub Jun 24, 2026
Open Report ↗
55 /100
Trust
Review

news-briefing

未声明的封面图生成功能

Doc MismatchObfuscationSensitive Access
ClawHub Jun 21, 2026
Open Report ↗
60 /100
Trust
Review

cloud-compare

文档声明与代码行为不符

Doc MismatchObfuscationSupply ChainSensitive Access
ClawHub Jun 14, 2026
Open Report ↗
35 /100
Trust
Review

gpt-image-2

未声明的外部网络通信

Doc MismatchData ExfilObfuscation
ClawHub Apr 22, 2026
Open Report ↗
55 /100
Trust
Review

auto-skill-hunter

权限声明与实际能力严重不符

Priv EscalationSupply ChainDoc MismatchSensitive Access
ClawHub Apr 19, 2026
Open Report ↗
50 /100
Trust
Review

E-SafeNet (suspected from encoded content)

SKILL.md 包含异常编码内容

ObfuscationDoc Mismatch
ClawHub Apr 12, 2026
Open Report ↗
1 / 3
Next →