中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
55 /100
Trust
Review

session-notebook

会话转录文件全文上传至外部端点

Data ExfilDoc MismatchSensitive AccessSupply Chain
ClawHub Sep 23, 2026
Open Report ↗
62 /100
Trust
Review

expert-audit-pub

文档声称本地运行，实际包含远程 API 调用

Doc MismatchPriv EscalationSupply ChainSensitive Access
ClawHub Sep 22, 2026
Open Report ↗
65 /100
Trust
Review

infant-blanket-kick-monitoring-analysis

用户身份凭证发送至外部服务器

Data ExfilSensitive AccessRCEPriv Escalation
ClawHub Sep 21, 2026
Open Report ↗
55 /100
Trust
Review

oo-telegram

安装命令超出 allowed-tools 声明范围

Priv EscalationSupply ChainDoc Mismatch
ClawHub Sep 20, 2026
Open Report ↗
55 /100
Trust
Review

department-budget-execution-check-free

声明与实际网络行为不符

Doc MismatchSensitive AccessPriv Escalation
ClawHub Sep 19, 2026
Open Report ↗
55 /100
Trust
Review

ar-aging-check-free

文档声明与实际网络行为不符

Doc MismatchSensitive AccessPriv Escalation
ClawHub Sep 19, 2026
Open Report ↗
45 /100
Trust
Review

award-contract-consistency-check-free

SKILL.md 声明不联网但实际存在外部网络请求

Doc MismatchData ExfilPriv EscalationPrompt Injection
ClawHub Sep 19, 2026
Open Report ↗
55 /100
Trust
Review

asset-disposal-check-free

文档声称离线运行但实际有网络行为

Doc MismatchData ExfilPriv EscalationSensitive Access
ClawHub Sep 19, 2026
Open Report ↗
48 /100
Trust
Review

asset-impairment-check-free

匿名标识声明与实际不符

Doc MismatchData ExfilPriv Escalation
ClawHub Sep 19, 2026
Open Report ↗
55 /100
Trust
Review

fork-latte-skill

Hardcoded API key embedded in skill files

Credential TheftPriv EscalationDoc MismatchSupply Chain
ClawHub Sep 18, 2026
Open Report ↗
55 /100
Trust
Review

smyx-aggressive-behavior-detection-analysis

已注释的 subprocess 远程执行代码

RCECredential TheftSensitive AccessDoc Mismatch
ClawHub Sep 18, 2026
Open Report ↗
55 /100
Trust
Review

companion-skill

对抗性铁律覆盖机制

Prompt InjectionPriv EscalationDoc Mismatch
ClawHub Sep 16, 2026
Open Report ↗
60 /100
Trust
Review

xinjianxue-skill-long_distance-cn

数据处理声明仅依赖文档，无代码验证

Doc MismatchSensitive AccessPriv Escalation
ClawHub Sep 14, 2026
Open Report ↗
55 /100
Trust
Review

smyx-respiratory-rate-abnormal-detect-analysis

Undisclosed local SQLite token storage

Doc MismatchPriv EscalationData ExfilSupply Chain
ClawHub Sep 14, 2026
Open Report ↗
45 /100
Trust
Review

delvorn-register

Undeclared promotional content injection script

Doc MismatchCredential TheftData ExfilPriv Escalation
ClawHub Sep 13, 2026
Open Report ↗
62 /100
Trust
Review

clawpi-redpacket-monitor

未声明的JWT凭证读取

Doc MismatchSensitive AccessSupply ChainPriv Escalation
ClawHub Sep 12, 2026
Open Report ↗
← Previous
2 / 9
Next →