中文 EN
Start Review
Risk Sample Stream

Which skills recently failed
or triggered trust review

This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.

610 Risky samples surfaced
0 New in 7 days
0 Platform misses surfaced
All Malicious High Risk Suspicious
Sort by time Sort by risk
All Code Exec Credential Theft Data Exfil Priv Esc Supply Chain Doc Deception Prompt Injection Obfuscation
65 /100
Trust
Review

plori

Shell管道安装命令存在供应链风险

Supply ChainPriv Escalation
ClawHub 9 days ago
Open Report ↗
60 /100
Trust
Review

peen

远程脚本管道执行

RCESupply ChainPriv Escalation
ClawHub 10 days ago
Open Report ↗
58 /100
Trust
Review

psychology-analysis

未声明的本地数据库操作

Doc MismatchSensitive Access
ClawHub 14 days ago
Open Report ↗
60 /100
Trust
Review

anzhuang-suanliang

权限声明与实际能力严重不符

Doc MismatchSupply Chain
ClawHub 15 days ago
Open Report ↗
60 /100
Trust
Review

cue-regional-policy-brief

外部 Runner 代码不可审计

Supply ChainSensitive AccessDoc Mismatch
ClawHub 15 days ago
Open Report ↗
52 /100
Trust
Review

jira-toolkit-free

文档嵌入凭证收割命令模板

Credential TheftDoc MismatchSupply ChainPriv Escalation
ClawHub 16 days ago
Open Report ↗
55 /100
Trust
Review

companion-skill

尝试覆盖 agent 安全拒绝机制

Prompt InjectionDoc Mismatch
ClawHub 16 days ago
Open Report ↗
65 /100
Trust
Review

gaode-taxi

工具函数数量文档-代码严重不符

Doc MismatchSensitive AccessSupply Chain
ClawHub 19 days ago
Open Report ↗
65 /100
Trust
Review

cite-holmes

未声明的本地 ollama 调用

Doc MismatchSupply ChainSensitive Access
ClawHub 20 days ago
Open Report ↗
55 /100
Trust
Review

dlazy-webtoon-adapter

Shell execution capability not declared in SKILL.md

Doc MismatchPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
52 /100
Trust
Review

stratpit

文档声明与实际能力存在关键矛盾

Doc MismatchSupply ChainCredential TheftPriv Escalation
ClawHub 21 days ago
Open Report ↗
60 /100
Trust
Review

wenzi-runse

Hardcoded API key in distributed skill package

Credential TheftDoc Mismatch
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

demo-text-summarizer

SKILL.md 未声明的发布功能

Doc MismatchCredential TheftPriv EscalationSupply Chain
ClawHub 21 days ago
Open Report ↗
55 /100
Trust
Review

agent-guardian

apply-qqbot-patch.sh 通过 sed 注入 execSync 修改第三方插件

RCEPersistenceSupply ChainSensitive Access
ClawHub 22 days ago
Open Report ↗
55 /100
Trust
Review

agentwalletapi

环境变量声明与技能功能不符

Doc MismatchSupply Chain
ClawHub 22 days ago
Open Report ↗
45 /100
Trust
Review

auto-skill-hunter

文档未声明网络请求能力

Doc MismatchSensitive AccessRCESupply Chain
ClawHub 23 days ago
Open Report ↗
1 / 24
Next →