Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
High Risk
psychology-analysis
静默phoneLogin调用
ClawHub 29 days ago
Open Report ↗
High Risk
auto-skill-hunter
Undeclared shell:WRITE via execSync — git clone
ClawHub Jun 24, 2026
Open Report ↗
High Risk
memphis-cognitive
Remote script execution via curl|bash
ClawHub Jun 24, 2026
Open Report ↗
High Risk
tunnel-proxy
Unrestricted PTY shell access granted to agent
ClawHub Jun 21, 2026
Open Report ↗
High Risk
birth-system-manager
SKILL.md claims private keys are never displayed, but code prints them to stdout
ClawHub Jun 18, 2026
Open Report ↗
High Risk
pub
Remote script execution from unverified source
ClawHub Jun 18, 2026
Open Report ↗
High Risk
skill-publisher
硬编码 GitHub Personal Access Token
ClawHub Jun 11, 2026
Open Report ↗
High Risk
agnes-image-gen
Hardcoded real API key in SKILL.md
ClawHub Jun 10, 2026
Open Report ↗
High Risk
superada-workflow-entity-mission-control-bootstrap
外部仓库代码执行
ClawHub Jun 3, 2026
Open Report ↗
High Risk
tweet-monitor-pro
文档声称零依赖但实际存在外部脚本依赖
ClawHub Apr 19, 2026
Open Report ↗
High Risk
ludwitt-university
updateInstructions 远程代码执行通道
ClawHub Apr 12, 2026
Open Report ↗
High Risk
Setup Multi Gateway
硬编码API密钥
Manual upload Apr 5, 2026
Open Report ↗
High Risk
memolecard-auto
Cookie extraction and exfiltration to configurable external server
Manual upload Apr 5, 2026
Open Report ↗
High Risk
openclaw-backup
Missing implementation scripts
Manual upload Apr 5, 2026
Open Report ↗
High Risk
claw-ops-manager
Undeclared Shell Command Execution
Manual upload Apr 5, 2026
Open Report ↗
High Risk
hive-commander
Covert credential extraction from runtime environment
Manual upload Apr 5, 2026
Open Report ↗