Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
High Risk
飞书机器人配置助手
文档中记录curl|bash远程脚本执行命令
Manual upload Apr 4, 2026
Open Report ↗
High Risk
xiaohongshu-win
Hardcoded placeholder IP address
Manual upload Apr 4, 2026
Open Report ↗
High Risk
zanna-aperta
Undeclared arbitrary Docker command execution
Manual upload Apr 4, 2026
Open Report ↗
High Risk
skill-factory
Undeclared shell command execution via execSync
Manual upload Apr 4, 2026
Open Report ↗
High Risk
nano-banana-pro
Hardcoded DASHSCOPE_API_KEY in _meta.json
Manual upload Apr 4, 2026
Open Report ↗
High Risk
huo15-memory-evolution
Hardcoded API Key in Source Code
Manual upload Apr 4, 2026
Open Report ↗
High Risk
awareness-memory
Undeclared session file exfiltration to external cloud
Manual upload Apr 4, 2026
Open Report ↗
High Risk
clawguard-threat-detect
Hardcoded Reverse Shell Payloads in Documentation
Manual upload Apr 4, 2026
Open Report ↗
High Risk
messenger_send_node
Undeclared Tor Network Routing
Manual upload Apr 3, 2026
Open Report ↗
High Risk
grinders-farm
start.sh contains completely unrelated code
Manual upload Apr 3, 2026
Open Report ↗
High Risk
resume-jd-matcher
Hardcoded Real API Keys in Configuration
Manual upload Apr 3, 2026
Open Report ↗
High Risk
feishu-mcp
Hardcoded Application Secret Exposed
Manual upload Apr 3, 2026
Open Report ↗
High Risk
github-code-analyzer
Hardcoded API Credential
Manual upload Apr 3, 2026
Open Report ↗
High Risk
qclaw-watchdog
Hardcoded Feishu API Credentials in config.json
Manual upload Apr 3, 2026
Open Report ↗
High Risk
skill-security-vet
Undeclared local/full computer scanning mode
Manual upload Apr 3, 2026
Open Report ↗
High Risk
skill-gatekeeper
Undeclared child_process.exec with hardcoded path
Manual upload Apr 3, 2026
Open Report ↗